INCIDENT 2026-08-26 18:42:53 trigger: php_rss=1581MB ================================================================== load: 6.48 4.40 2.56 10/598 2244748 ncpu:10 mem_avail: 5684MB/11729MB (48.5%) swap_used:1503MB swapout:0/s blocked(D):0 running:11 iowait:0.0% steal:0.0% php: 9 procs / 1581MB heaviest user: madalice (9 procs, 1581MB) apache: 26 procs tcp_estab: 30 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2402 madalice 9 1625 root 235 787 nobody 25 457 netdata 8 257 mailman 20 199 dovenull 6 46 wp-toolkit 6 19 dovecot 3 19 evolution 6 16 aaa 1 14 cpanellogin 1 13 zabbix 1 12 kurri 1 7 named 1 6 nscd 1 4 dbus 1 3 cpanelconnecttrack 1 3 polkitd 1 2 mailnull 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 9 1656 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4801 MB Active(file): 3286 MB Inactive(file): 680 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 424 MB CommitLimit: 9960 MB Committed_AS: 8242 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2703186 root 17:31:37 4788 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2362432 1 mysql 2459992 16.3 Ssl 1-15:11:37 /usr/sbin/mariadbd 2244710 2243580 madalice 238488 100 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2244711 2243539 madalice 234044 100 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2244708 2243522 madalice 233920 100 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2244709 2243438 madalice 227392 99.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2244713 2243583 madalice 214548 95.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 202960 2.5 Ssl 58-08:33:03 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1065018 2938778 root 191864 0.1 S 05:30:49 spamd child 2244715 2243548 madalice 167972 69.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2956399 2938778 root 145372 0.0 S 16:12:55 spamd child 2244717 2226777 madalice 134408 104 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2938778 1 root 94792 0.0 Ss 16:19:25 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2244718 2243595 madalice 78236 37.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 65000 0.0 Ss 11-10:52:24 /usr/lib/systemd/systemd-journald 2244771 2243492 madalice 49100 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 41608 0.0 Ss 35-16:01:33 cpsrvd (SSL) - waiting for connections 2223 1201 root 41580 0.0 Sl 58-08:33:02 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 33104 0.1 Sl 58-08:32:58 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 25468 0.1 Ss 58-08:33:02 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2243539 1276780 nobody 21640 0.0 S 01:51 /usr/sbin/httpd -k start 2243526 1276780 nobody 21600 0.0 S 01:51 /usr/sbin/httpd -k start 1463 1 root 21408 0.0 Ss 58-08:33:02 tailwatchd 2243543 1276780 nobody 21180 0.0 S 01:51 /usr/sbin/httpd -k start 2228326 1276780 nobody 21008 0.1 S 03:54 /usr/sbin/httpd -k start 2243604 1276780 nobody 20960 0.0 S 01:49 /usr/sbin/httpd -k start 2243486 1276780 nobody 20900 0.0 S 01:52 /usr/sbin/httpd -k start 2243465 1276780 nobody 20852 0.1 S 01:53 /usr/sbin/httpd -k start 2243597 1276780 nobody 20808 0.0 S 01:50 /usr/sbin/httpd -k start 2243548 1276780 nobody 20796 0.0 S 01:51 /usr/sbin/httpd -k start 2243528 1276780 nobody 20744 0.0 S 01:51 /usr/sbin/httpd -k start 2228871 1276780 nobody 20712 0.0 S 03:13 /usr/sbin/httpd -k start 2243186 1276780 nobody 20612 0.1 S 02:27 /usr/sbin/httpd -k start 2243492 1276780 nobody 20600 0.0 S 01:52 /usr/sbin/httpd -k start 2243580 1276780 nobody 20200 0.0 S 01:50 /usr/sbin/httpd -k start 2243595 1276780 nobody 20168 0.1 S 01:50 /usr/sbin/httpd -k start 2243583 1276780 nobody 20048 0.0 S 01:50 /usr/sbin/httpd -k start 2243599 1276780 nobody 20032 0.0 S 01:50 /usr/sbin/httpd -k start 185104 2431 netdata 19900 2.1 Sl 13-22:09:21 /usr/libexec/netdata/plugins.d/apps.plugin 1 2243436 1276780 nobody 19892 0.1 S 01:55 /usr/sbin/httpd -k start 2938201 1 root 19888 0.0 Ss 16:19:59 lfd - sleeping 2243485 1276780 nobody 19884 0.0 S 01:52 /usr/sbin/httpd -k start 2243540 1276780 nobody 19588 0.0 S 01:51 /usr/sbin/httpd -k start 2243438 1276780 nobody 18624 0.0 S 01:54 /usr/sbin/httpd -k start 2243522 1276780 nobody 17464 0.0 S 01:51 /usr/sbin/httpd -k start 2226777 1276780 nobody 16372 0.0 S 05:49 /usr/sbin/httpd -k start 2244307 3828812 aaa 14720 0.0 S 00:49 dovecot/imap 2938063 2938042 mailman 14492 0.0 S 16:20:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 2244622 1353308 cpanellogin 13364 0.0 S 00:17 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1471 1 root 13288 0.0 Ss 58-08:33:02 cPhulkd - processor 1204 1 zabbix 13136 0.2 Ssl 58-08:33:03 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2244617 3828812 root 12868 0.0 S 00:17 dovecot/auth -w 3360268 1471 root 12704 0.0 S 14:14:04 cPhulkd - dbprocessor 1276780 1 root 12500 0.0 Ss 21-03:11:38 /usr/sbin/httpd -k start 2937469 1 root 12200 0.0 Ss 16:20:20 queueprocd - waiting up to 60s to process a task 2938057 2938042 mailman 11348 0.0 S 16:20:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 1780156 3828812 dovenull 11344 0.0 S 1-18:10:03 dovecot/imap-login 2938053 2938042 mailman 11308 0.0 S 16:20:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 2938056 2938042 mailman 11292 0.0 S 16:20:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 2938052 2938042 mailman 11256 0.0 S 16:20:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 2938061 2938042 mailman 10884 0.0 S 16:20:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8813698 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+-------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+-------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8813692 | madalice_wp | 0 | Waiting for table level lock | SELECT option_value FROM AMuqf6qZ_options WHERE option_name = 'wc_settings_shippit_debug' LIMIT 1 | | 8813690 | madalice_wp | 0 | Waiting for table level lock | SELECT option_name, option_value FROM AMuqf6qZ_options WHERE option_name IN ('woocommerce_customer_cancelled_order_settings','woocommerce_customer_failed_order_settings','woocommerce_admin_payment_gat | | 8813689 | madalice_wp | 0 | Waiting for table level lock | SELECT option_name, option_value FROM AMuqf6qZ_options WHERE option_name IN ('_transient_forminator_general_data_protection_cleanup','_transient_timeout_forminator_general_data_protection_cleanup') | | 8813688 | madalice_wp | 0 | Waiting for table level lock | UPDATE `AMuqf6qZ_options` SET `option_value` = 'a:530:{s:24:\"^wc-auth/v([1]{1})/(.*)?\";s:63:\"index.php?wc-auth-version=$matches[1]&wc-auth-route=$matches[2]\";s:21:\"^wc/file/transient/?$\";s:33:\" | +---------+-------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 339 otterfencing/otterfencing.com.au-ssl_log 77 evolution/portal.evolutionerp.com.au-ssl_log 24 customc/customcentral.com.au-ssl_log 21 evolution/my.evolutionerp.com.au-ssl_log 7 tubesupplies/tubesupplies.com.au-ssl_log 6 alison/alisonarts.com.au-ssl_log 4 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 289 64.31.55.44 75 20.251.63.238 39 20.104.104.62 24 203.54.180.238 18 62.60.130.182 6 2406:5a00:b40d:a300:29fd:5699:9ac7:b00b 6 118.127.40.55 3 101.119.90.203 2 91.92.243.243 2 112.86.225.54 1 98.66.162.46 1 47.128.51.140 1 40.77.167.70 1 40.77.167.126 1 40.77.167.1 --- top request paths across all vhosts (last 3 min) --- 24 GET /heartbeat.php 19 GET / 5 POST /wp-cron.php 4 GET /robots.txt 3 POST /wp-login.php 3 POST /functions.php 3 GET /feed/ 3 GET /admin.php 2 POST / 2 GET /store/db12/ 2 GET /makeasmtp.php 2 GET /madalice.com.au.zip 2 GET /madalice.com.au.z 2 GET /madalice.com.au.xz 2 GET /madalice.com.au.tar.gz 2 GET /madalice.com.au.tar.bz2 2 GET /madalice.com.au.rar 2 GET /madalice.com.au.lz 2 GET /index.php 2 GET /db.zip --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 4 GET / 2 POST / 2 GET /store/db12/ 2 GET /madalice.com.au.zip 2 GET /madalice.com.au.z 2 GET /madalice.com.au.xz 2 GET /madalice.com.au.tar.gz 2 GET /madalice.com.au.tar.bz2 2 GET /madalice.com.au.rar 2 GET /madalice.com.au.lz 2 GET /db.zip 2 GET /db.xz -- last 10 requests -- 64.31.55.44 - - [26/Aug/2026:18:42:45 +1000] "GET /.z HTTP/1.1" 404 36637 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0" 64.31.55.44 - - [26/Aug/2026:18:42:45 +1000] "GET /wwwroot.z HTTP/1.1" 404 36644 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4" 64.31.55.44 - - [26/Aug/2026:18:42:46 +1000] "GET /ROOT.z HTTP/1.1" 404 36646 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.22" 64.31.55.44 - - [26/Aug/2026:18:42:46 +1000] "GET /htdocs.z HTTP/1.1" 404 36646 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 64.31.55.44 - - [26/Aug/2026:18:42:47 +1000] "GET /www.z HTTP/1.1" 404 36638 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0" 64.31.55.44 - - [26/Aug/2026:18:42:48 +1000] "GET /web.z HTTP/1.1" 404 36640 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 64.31.55.44 - - [26/Aug/2026:18:42:49 +1000] "GET /html.z HTTP/1.1" 404 36641 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) ConnectPC Safari/537.36" 64.31.55.44 - - [26/Aug/2026:18:42:49 +1000] "GET /uploads.z HTTP/1.1" 404 36636 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 64.31.55.44 - - [26/Aug/2026:18:42:49 +1000] "GET /webapps.z HTTP/1.1" 404 36641 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.31.55.44 - - [26/Aug/2026:18:42:49 +1000] "GET /public_html.z HTTP/1.1" 404 36644 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 3 GET /admin.php 1 POST /wp-cron.php 1 GET /yj09.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp.php 1 GET /w.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-0.php 1 GET /verox.php 1 GET /this_is_a_new_hello_world.php 1 GET /system_log.php -- last 10 requests -- 20.251.63.238 - - [26/Aug/2026:18:41:59 +1000] "GET /file1221.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:00 +1000] "GET /inx.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:00 +1000] "GET /reviall.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:01 +1000] "GET /11.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:01 +1000] "GET /File.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:02 +1000] "GET /fi22.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:02 +1000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:03 +1000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:04 +1000] "GET /4PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.251.63.238 - - [26/Aug/2026:18:42:04 +1000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 401 36 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 24 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [26/Aug/2026:18:41:14 +1000] "GET /heartbeat.php?sentAt=1787733674&bytes=106,142,166,170&_=1787631309620 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:17 +1000] "GET /heartbeat.php?sentAt=1787733677&bytes=106,142,166,173&_=1787730214661 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:24 +1000] "GET /heartbeat.php?sentAt=1787733684&bytes=106,142,166,180&_=1787631309621 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:27 +1000] "GET /heartbeat.php?sentAt=1787733687&bytes=106,142,166,183&_=1787730214662 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:34 +1000] "GET /heartbeat.php?sentAt=1787733694&bytes=106,142,166,190&_=1787631309622 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:37 +1000] "GET /heartbeat.php?sentAt=1787733697&bytes=106,142,166,193&_=1787730214663 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:44 +1000] "GET /heartbeat.php?sentAt=1787733704&bytes=106,142,166,200&_=1787631309623 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:47 +1000] "GET /heartbeat.php?sentAt=1787733707&bytes=106,142,166,203&_=1787730214664 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:54 +1000] "GET /heartbeat.php?sentAt=1787733714&bytes=106,142,166,210&_=1787631309624 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:18:41:57 +1000] "GET /heartbeat.php?sentAt=1787733717&bytes=106,142,166,213&_=1787730214665 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-26 18:40:23 L1=4.52 run=9 blk=0 avail=5660 (48.3%) swpO=0 conn=6 myRSS=2410 php=7 phpRSS=1475 ap=27 tcp=32 topuser=madalice 2026-08-26 18:40:32 L1=4.66 run=5 blk=0 avail=6428 (54.8%) swpO=0 conn=7 myRSS=2410 php=4 phpRSS=593 ap=28 tcp=28 topuser=madalice 2026-08-26 18:40:33 L1=4.66 run=6 blk=0 avail=6271 (53.5%) swpO=0 conn=6 myRSS=2410 php=5 phpRSS=794 ap=28 tcp=27 topuser=madalice 2026-08-26 18:40:42 L1=4.88 run=3 blk=1 avail=6646 (56.7%) swpO=0 conn=7 myRSS=2410 php=1 phpRSS=265 ap=31 tcp=33 topuser=madalice 2026-08-26 18:40:43 L1=4.88 run=9 blk=0 avail=6688 (57.0%) swpO=0 conn=6 myRSS=2410 php=3 phpRSS=287 ap=31 tcp=30 topuser=madalice 2026-08-26 18:40:52 L1=4.91 run=6 blk=0 avail=6326 (53.9%) swpO=0 conn=7 myRSS=2410 php=5 phpRSS=704 ap=32 tcp=35 topuser=madalice 2026-08-26 18:40:54 L1=4.91 run=9 blk=0 avail=6091 (51.9%) swpO=0 conn=6 myRSS=2410 php=8 phpRSS=1067 ap=32 tcp=37 topuser=madalice 2026-08-26 18:41:02 L1=4.68 run=9 blk=0 avail=6061 (51.7%) swpO=0 conn=7 myRSS=2410 php=8 phpRSS=859 ap=63 tcp=120 topuser=madalice 2026-08-26 18:41:04 L1=4.68 run=10 blk=0 avail=5176 (44.1%) swpO=0 conn=6 myRSS=2410 php=7 phpRSS=1498 ap=95 tcp=116 topuser=madalice 2026-08-26 18:41:12 L1=5.54 run=7 blk=0 avail=5668 (48.3%) swpO=800 conn=7 myRSS=2402 php=6 phpRSS=804 ap=120 tcp=36 topuser=madalice 2026-08-26 18:41:14 L1=5.54 run=4 blk=0 avail=5821 (49.6%) swpO=800 conn=4 myRSS=2402 php=3 phpRSS=565 ap=119 tcp=29 topuser=madalice 2026-08-26 18:41:23 L1=5.79 run=17 blk=0 avail=5367 (45.8%) swpO=0 conn=9 myRSS=2402 php=9 phpRSS=1137 ap=110 tcp=88 topuser=madalice 2026-08-26 18:41:24 L1=5.79 run=13 blk=0 avail=5278 (45.0%) swpO=0 conn=4 myRSS=2402 php=9 phpRSS=1345 ap=109 tcp=38 topuser=madalice 2026-08-26 18:41:33 L1=5.51 run=7 blk=0 avail=5476 (46.7%) swpO=0 conn=9 myRSS=2402 php=6 phpRSS=1094 ap=100 tcp=31 topuser=madalice 2026-08-26 18:41:34 L1=5.51 run=6 blk=0 avail=5981 (51.0%) swpO=0 conn=4 myRSS=2402 php=3 phpRSS=422 ap=99 tcp=30 topuser=madalice 2026-08-26 18:41:43 L1=6.92 run=6 blk=0 avail=5640 (48.1%) swpO=0 conn=9 myRSS=2402 php=5 phpRSS=968 ap=90 tcp=43 topuser=madalice 2026-08-26 18:41:44 L1=6.92 run=2 blk=0 avail=6174 (52.6%) swpO=0 conn=4 myRSS=2402 php=2 phpRSS=339 ap=89 tcp=38 topuser=madalice 2026-08-26 18:41:53 L1=6.63 run=17 blk=0 avail=5525 (47.1%) swpO=0 conn=9 myRSS=2402 php=8 phpRSS=1060 ap=80 tcp=39 topuser=madalice 2026-08-26 18:41:54 L1=6.63 run=10 blk=0 avail=5635 (48.0%) swpO=0 conn=4 myRSS=2402 php=7 phpRSS=916 ap=79 tcp=50 topuser=madalice 2026-08-26 18:42:03 L1=6.67 run=6 blk=0 avail=6209 (52.9%) swpO=0 conn=9 myRSS=2402 php=3 phpRSS=477 ap=70 tcp=28 topuser=madalice 2026-08-26 18:42:04 L1=6.67 run=2 blk=0 avail=6529 (55.7%) swpO=0 conn=4 myRSS=2402 php=1 phpRSS=92 ap=69 tcp=29 topuser=madalice 2026-08-26 18:42:13 L1=6.85 run=1 blk=0 avail=6661 (56.8%) swpO=0 conn=9 myRSS=2402 php=0 phpRSS=0 ap=60 tcp=31 topuser=- 2026-08-26 18:42:14 L1=6.85 run=2 blk=0 avail=6670 (56.9%) swpO=0 conn=1 myRSS=2402 php=0 phpRSS=0 ap=59 tcp=27 topuser=- 2026-08-26 18:42:23 L1=6.66 run=14 blk=0 avail=5718 (48.7%) swpO=0 conn=9 myRSS=2402 php=10 phpRSS=1427 ap=50 tcp=38 topuser=madalice 2026-08-26 18:42:24 L1=6.66 run=9 blk=0 avail=6023 (51.4%) swpO=0 conn=1 myRSS=2402 php=8 phpRSS=1047 ap=49 tcp=41 topuser=madalice 2026-08-26 18:42:33 L1=6.33 run=4 blk=0 avail=6670 (56.9%) swpO=0 conn=9 myRSS=2402 php=2 phpRSS=309 ap=40 tcp=20 topuser=madalice 2026-08-26 18:42:34 L1=6.33 run=4 blk=0 avail=6689 (57.0%) swpO=0 conn=1 myRSS=2402 php=2 phpRSS=296 ap=39 tcp=22 topuser=madalice 2026-08-26 18:42:43 L1=6.27 run=2 blk=0 avail=6839 (58.3%) swpO=0 conn=9 myRSS=2402 php=1 phpRSS=106 ap=34 tcp=29 topuser=alison 2026-08-26 18:42:44 L1=6.27 run=3 blk=1 avail=6836 (58.3%) swpO=0 conn=1 myRSS=2402 php=2 phpRSS=148 ap=33 tcp=27 topuser=madalice 2026-08-26 18:42:53 L1=6.48 run=11 blk=0 avail=5684 (48.5%) swpO=0 conn=10 myRSS=2402 php=9 phpRSS=1581 ap=26 tcp=30 topuser=madalice