INCIDENT 2026-08-29 01:17:43 trigger: php_rss=1554MB ================================================================== load: 4.23 3.06 1.98 4/665 1222030 ncpu:10 mem_avail: 7089MB/13777MB (51.5%) swap_used:1236MB swapout:0/s blocked(D):0 running:5 iowait:0.1% steal:0.0% php: 12 procs / 1554MB heaviest user: madalice (8 procs, 1325MB) apache: 24 procs tcp_estab: 32 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2807 madalice 8 1329 root 256 1207 nobody 23 451 mailman 20 238 netdata 7 198 cpanellogin 1 107 alison 1 88 dovenull 6 58 wp-toolkit 3 56 kurri 3 37 mailnull 3 32 evolution 7 30 lowrange 2 29 zabbix 1 26 dovecot 3 23 named 1 16 infinium 1 14 candyfabcom 1 14 aaa 1 14 --- php workers by user --- USER PROCS RSS_MB madalice 8 1331 root 2 128 alison 1 89 evolution 1 15 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4776 MB Active(file): 2826 MB Inactive(file): 2537 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 1373 MB CommitLimit: 10984 MB Committed_AS: 8278 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 22:59:03 7444 /usr/bin/imunify-agent-proxy 1146763 root 17:42 1228 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2875384 12.9 Ssl 22:58:32 /usr/sbin/mariadbd 1221108 510022 madalice 220560 10.9 R 01:04 php-fpm: pool madalice_com_au 1202218 1202214 root 177720 6.1 S 06:42 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload 508924 1 netdata 175772 2.0 Ssl 22:58:01 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 529389 527476 root 171764 0.0 S 22:53:25 spamd child 1221106 510022 madalice 167496 11.4 S 01:04 php-fpm: pool madalice_com_au 1204128 510022 madalice 164804 27.7 S 04:54 php-fpm: pool madalice_com_au 1203860 510022 madalice 164520 29.1 S 05:23 php-fpm: pool madalice_com_au 1205122 510022 madalice 163600 20.7 S 02:53 php-fpm: pool madalice_com_au 1221103 510022 madalice 163572 11.5 S 01:05 php-fpm: pool madalice_com_au 1221104 510022 madalice 163552 11.5 S 01:05 php-fpm: pool madalice_com_au 1221105 510022 madalice 163436 11.2 S 01:05 php-fpm: pool madalice_com_au 1113196 1353308 cpanellogin 110160 0.1 S 28:26 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 1221998 1221666 alison 94852 58.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1203804 1202218 root 94596 95.2 R 05:27 /usr/local/cpanel/3rdparty/bin/php /opt/cpanel/ea-wappspector/wappspector.phar --max=1 --json --depth=9 /home/evolution 527476 1 root 80976 0.0 Ss 22:55:04 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2985227 527476 root 70436 0.0 S 11:39:02 spamd child 509266 1 root 70128 0.0 Ss 22:57:58 /usr/lib/systemd/systemd-journald 509236 509098 root 54668 0.0 Sl 22:57:58 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41444 0.1 Ss 37-22:36:24 cpsrvd (SSL) - waiting for connections 939687 1 root 38096 0.0 Ss 01:17:42 lfd - sleeping 510022 1 root 37368 0.0 Ss 22:57:54 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 33596 0.0 Ss 21:05:35 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509640 508992 root 28576 0.0 Sl 22:57:56 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 483898 1 zabbix 27300 0.2 Ssl 22:59:15 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1466 1 root 25628 0.0 Ss 60-15:07:53 dnsadmin - server mode 1220793 506832 nobody 25216 0.3 S 01:28 /usr/sbin/httpd -k start 1205081 506832 nobody 24768 0.5 S 02:56 /usr/sbin/httpd -k start 1220796 506832 nobody 24572 0.0 S 01:28 /usr/sbin/httpd -k start 1205087 506832 nobody 24544 0.2 S 02:54 /usr/sbin/httpd -k start 1201259 506832 nobody 24372 0.0 S 07:18 /usr/sbin/httpd -k start 1469 1 root 24164 0.1 Ss 60-15:07:53 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1221698 506832 nobody 23152 0.0 S 00:26 /usr/sbin/httpd -k start 1221678 506832 nobody 22540 0.0 S 00:27 /usr/sbin/httpd -k start 1221675 506832 nobody 22520 0.0 S 00:27 /usr/sbin/httpd -k start 1221690 506832 nobody 22164 0.0 S 00:26 /usr/sbin/httpd -k start 1221696 506832 nobody 22080 0.0 S 00:26 /usr/sbin/httpd -k start 1221694 506832 nobody 21892 0.0 S 00:26 /usr/sbin/httpd -k start 1221697 506832 nobody 21860 0.0 S 00:26 /usr/sbin/httpd -k start 1463 1 root 21604 0.0 Ss 60-15:07:53 tailwatchd 1221666 506832 nobody 21520 0.0 S 00:29 /usr/sbin/httpd -k start 938585 1 wp-toolkit 21472 0.0 Ss 21:05:35 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1221671 506832 nobody 20636 0.0 S 00:28 /usr/sbin/httpd -k start 1221673 506832 nobody 20624 0.0 S 00:27 /usr/sbin/httpd -k start 1221672 506832 nobody 20620 0.0 S 00:28 /usr/sbin/httpd -k start 1221693 506832 nobody 20444 0.2 S 00:26 /usr/sbin/httpd -k start 506832 1 root 20020 0.0 Ss 22:58:31 /usr/sbin/httpd -k start 1221664 506832 nobody 19320 0.0 S 00:30 /usr/sbin/httpd -k start 1221665 506832 nobody 19320 0.0 S 00:29 /usr/sbin/httpd -k start 1221692 506832 nobody 18796 0.1 S 00:26 /usr/sbin/httpd -k start 481558 1 root 18252 0.1 Ssl 23:00:25 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 509671 508992 netdata 18176 2.1 Sl 22:57:56 /usr/libexec/netdata/plugins.d/apps.plugin 1 508634 1 named 17192 0.0 Ssl 22:58:06 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1163735 1471 root 16916 0.0 S 15:04 cPhulkd - dbprocessor 4180059 4180015 evolution 15772 0.0 Ss 1-01:17:43 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 1471 1 root 15732 0.0 Ss 60-15:07:53 cPhulkd - processor 1204412 1471 root 15200 0.0 S 04:24 cPhulkd - processor - http socket 245174 508511 aaa 15188 0.0 S 04:42:35 dovecot/imap 607605 508511 lowrange 15164 0.0 S 02:56:25 dovecot/imap 508856 508814 mailman 14960 0.0 S 22:58:04 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3760214 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 1071 madalice/madalice.com.au-ssl_log 97 olympic/olympicfencing.com.au-ssl_log 80 vinesit/vinesit.com.au-ssl_log 59 customc/customcentral.com.au-ssl_log 56 otter2/otterfencing.net.au-ssl_log 37 alison/alisonarts.com.au-ssl_log 34 evolution/portal.evolutionerp.com.au-ssl_log 31 tubesupplies/tubesupplies.com.au-ssl_log 31 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 1071 40.115.94.245 87 20.48.251.3 59 4.232.148.111 46 91.92.42.71 38 91.98.156.201 37 158.23.184.117 29 203.54.180.238 23 20.48.147.90 15 212.227.154.251 11 118.127.40.55 7 57.129.136.36 5 51.75.153.0 3 98.87.4.110 3 50.6.169.131 3 193.70.46.29 --- top request paths across all vhosts (last 3 min) --- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 48 POST /wp-login.php 29 GET /heartbeat.php 13 GET / 9 GET /api/getItem/NA 8 POST /wp-cron.php 5 GET /wp-json/wp/v2/users 4 GET /api/getItem/PWFBW3151KG 3 POST / 3 GET /wp-json/ldlms/v2/users 3 GET /store/hand-painted-nike-af1-roosters/ 2 POST /graphql 2 GET /xmlrpc.php 2 GET /wp-json/wc/v3/customers 2 GET /wp-json/tutor/v1/students 2 GET /wp-json/mepr/v1/members --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/K150MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/RGW90 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/RGW100 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/RGW120 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/RGW160 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/RGW117T HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/RGW80 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/GP150x200x8 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:20 +1000] "GET /api/getItem/K125MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:01:16:21 +1000] "GET /api/getItem/253-40SP HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/hand-painted-nike-af1-roosters/ 2 GET /txets.php 2 GET /store/hand-painted-nike-af1-roses/ 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /xza.php 1 GET //xza.php 1 GET /xp.php 1 GET /xin1.php 1 GET /xa.php 1 GET /wsws.php -- last 10 requests -- 20.48.251.3 - - [29/Aug/2026:01:17:09 +1000] "GET /verox.php HTTP/1.1" 404 36644 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:11 +1000] "GET /localconf.php HTTP/1.1" 404 36647 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:12 +1000] "GET /xa.php HTTP/1.1" 404 36644 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:14 +1000] "GET /maxro.php HTTP/1.1" 404 36644 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:16 +1000] "GET /phina.php HTTP/1.1" 404 36643 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:18 +1000] "GET /aws_secret_config.php HTTP/1.1" 404 36654 "-" "-" 114.119.131.88 - - [29/Aug/2026:01:17:18 +1000] "GET /store/hand-painted-nike-af1-roosters/?amp%3Bwcpr_image=1&wcpr_rating=5&rating=1 HTTP/1.1" 404 36661 "https://madalice.com.au/store/hand-painted-nike-af1-roosters/?amp 20.48.251.3 - - [29/Aug/2026:01:17:19 +1000] "GET /greem_res.php HTTP/1.1" 404 36646 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:21 +1000] "GET /app/Helpers/bladeHelpers.php HTTP/1.1" 404 36655 "-" "-" 20.48.251.3 - - [29/Aug/2026:01:17:23 +1000] "GET /wp-jufsis.php HTTP/1.1" 404 36646 "-" "-" == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 7 GET / 4 GET /wp-json/wp/v2/users 2 POST /wp-cron.php 2 GET /wp-json/wc/v3/customers 2 GET /wp-json/ldlms/v2/users 2 GET /wp-json/buddypress/v1/members 2 GET /wp-json/buddyboss/v1/members 2 GET /who-we-are 2 GET /team 2 GET /staff 2 GET /robots.txt 2 GET /readme.html -- last 10 requests -- 212.227.154.251 - - [29/Aug/2026:01:16:43 +1000] "GET /wp-json/wc/v3/customers HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozill 74.208.90.100 - - [29/Aug/2026:01:16:43 +1000] "GET /wp-json/wp/v2/users?include=6,1,2&_fields=id,slug,name HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 91.98.156.201 - - [29/Aug/2026:01:16:43 +1000] "GET /our-story HTTP/1.1" 404 10939 "-" "Mozilla/5.0 (compatible; IntentBeamBot/1.0; +https://intentbeam.com/bot)" 170.64.135.172 - - [29/Aug/2026:01:16:46 +1000] "GET /wp-json/mepr/v1/members HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla 91.98.156.201 - - [29/Aug/2026:01:16:46 +1000] "GET /contact-us HTTP/1.1" 301 1 "-" "Mozilla/5.0 (compatible; IntentBeamBot/1.0; +https://intentbeam.com/bot)" 152.53.108.193 - - [29/Aug/2026:01:16:49 +1000] "GET /wp-json/ldlms/v2/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/ 91.98.156.201 - - [29/Aug/2026:01:16:49 +1000] "GET /contact-us/ HTTP/1.1" 200 12319 "-" "Mozilla/5.0 (compatible; IntentBeamBot/1.0; +https://intentbeam.com/bot)" 57.129.136.36 - - [29/Aug/2026:01:16:49 +1000] "GET /?author=2 HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux 192.155.88.52 - - [29/Aug/2026:01:16:51 +1000] "GET /wp-json/tutor/v1/students HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozill 57.129.136.36 - - [29/Aug/2026:01:16:51 +1000] "GET / HTTP/1.1" 200 14351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_ --- last 30 samples (run-up to this incident) --- 2026-08-29 01:15:20 L1=3.88 run=4 blk=0 avail=7519 (54.6%) swpO=2 conn=3 myRSS=2807 php=11 phpRSS=1032 ap=24 tcp=38 topuser=madalice 2026-08-29 01:15:22 L1=3.88 run=5 blk=0 avail=7537 (54.7%) swpO=4 conn=6 myRSS=2806 php=10 phpRSS=988 ap=24 tcp=39 topuser=madalice 2026-08-29 01:15:30 L1=4.13 run=4 blk=0 avail=7687 (55.8%) swpO=4 conn=3 myRSS=2806 php=7 phpRSS=772 ap=24 tcp=31 topuser=madalice 2026-08-29 01:15:32 L1=4.13 run=7 blk=0 avail=7667 (55.7%) swpO=0 conn=6 myRSS=2806 php=9 phpRSS=844 ap=22 tcp=32 topuser=madalice 2026-08-29 01:15:40 L1=4.19 run=8 blk=0 avail=7595 (55.1%) swpO=0 conn=3 myRSS=2807 php=9 phpRSS=914 ap=23 tcp=36 topuser=madalice 2026-08-29 01:15:42 L1=4.19 run=5 blk=0 avail=7796 (56.6%) swpO=0 conn=6 myRSS=2807 php=7 phpRSS=664 ap=23 tcp=33 topuser=madalice 2026-08-29 01:15:50 L1=4.16 run=4 blk=0 avail=7695 (55.9%) swpO=0 conn=3 myRSS=2807 php=7 phpRSS=760 ap=22 tcp=36 topuser=madalice 2026-08-29 01:15:52 L1=4.16 run=7 blk=0 avail=7705 (55.9%) swpO=0 conn=3 myRSS=2807 php=8 phpRSS=766 ap=22 tcp=34 topuser=madalice 2026-08-29 01:16:01 L1=4.29 run=8 blk=0 avail=7609 (55.2%) swpO=0 conn=3 myRSS=2807 php=8 phpRSS=857 ap=22 tcp=34 topuser=madalice 2026-08-29 01:16:02 L1=4.29 run=9 blk=0 avail=7590 (55.1%) swpO=0 conn=3 myRSS=2807 php=10 phpRSS=961 ap=22 tcp=36 topuser=madalice 2026-08-29 01:16:11 L1=4.55 run=7 blk=0 avail=7485 (54.3%) swpO=0 conn=5 myRSS=2807 php=10 phpRSS=1044 ap=23 tcp=34 topuser=madalice 2026-08-29 01:16:13 L1=4.55 run=8 blk=0 avail=7513 (54.5%) swpO=0 conn=3 myRSS=2807 php=9 phpRSS=985 ap=23 tcp=54 topuser=madalice 2026-08-29 01:16:21 L1=4.39 run=12 blk=0 avail=7663 (55.6%) swpO=0 conn=5 myRSS=2807 php=8 phpRSS=733 ap=36 tcp=44 topuser=madalice 2026-08-29 01:16:23 L1=4.39 run=3 blk=0 avail=7640 (55.5%) swpO=0 conn=3 myRSS=2807 php=8 phpRSS=771 ap=34 tcp=46 topuser=madalice 2026-08-29 01:16:31 L1=4.17 run=8 blk=1 avail=7294 (52.9%) swpO=0 conn=5 myRSS=2807 php=10 phpRSS=1166 ap=34 tcp=50 topuser=madalice 2026-08-29 01:16:33 L1=4.17 run=6 blk=0 avail=7475 (54.3%) swpO=0 conn=3 myRSS=2807 php=9 phpRSS=962 ap=33 tcp=40 topuser=madalice 2026-08-29 01:16:41 L1=4.30 run=5 blk=0 avail=7045 (51.1%) swpO=5 conn=3 myRSS=2807 php=13 phpRSS=1527 ap=27 tcp=43 topuser=madalice 2026-08-29 01:16:43 L1=4.30 run=4 blk=0 avail=7080 (51.4%) swpO=5 conn=3 myRSS=2807 php=12 phpRSS=1461 ap=27 tcp=41 topuser=madalice 2026-08-29 01:16:51 L1=4.09 run=5 blk=0 avail=7020 (51.0%) swpO=0 conn=3 myRSS=2807 php=13 phpRSS=1574 ap=25 tcp=35 topuser=madalice 2026-08-29 01:16:53 L1=4.09 run=4 blk=0 avail=7040 (51.1%) swpO=0 conn=3 myRSS=2807 php=12 phpRSS=1524 ap=24 tcp=35 topuser=madalice 2026-08-29 01:17:01 L1=4.15 run=4 blk=0 avail=7090 (51.5%) swpO=0 conn=3 myRSS=2807 php=12 phpRSS=1501 ap=21 tcp=27 topuser=madalice 2026-08-29 01:17:03 L1=4.15 run=4 blk=0 avail=7062 (51.3%) swpO=0 conn=3 myRSS=2807 php=12 phpRSS=1547 ap=19 tcp=27 topuser=madalice 2026-08-29 01:17:11 L1=3.90 run=4 blk=0 avail=7188 (52.2%) swpO=0 conn=2 myRSS=2807 php=11 phpRSS=1432 ap=18 tcp=28 topuser=madalice 2026-08-29 01:17:13 L1=3.90 run=3 blk=0 avail=7196 (52.2%) swpO=0 conn=3 myRSS=2807 php=11 phpRSS=1430 ap=17 tcp=58 topuser=madalice 2026-08-29 01:17:21 L1=3.92 run=5 blk=0 avail=6782 (49.2%) swpO=0 conn=5 myRSS=2807 php=14 phpRSS=1750 ap=46 tcp=50 topuser=madalice 2026-08-29 01:17:23 L1=3.92 run=4 blk=0 avail=7001 (50.8%) swpO=0 conn=3 myRSS=2807 php=12 phpRSS=1484 ap=44 tcp=42 topuser=madalice 2026-08-29 01:17:31 L1=3.86 run=2 blk=0 avail=7090 (51.5%) swpO=0 conn=5 myRSS=2808 php=11 phpRSS=1426 ap=36 tcp=40 topuser=madalice 2026-08-29 01:17:33 L1=3.86 run=3 blk=0 avail=7103 (51.6%) swpO=0 conn=3 myRSS=2808 php=11 phpRSS=1425 ap=34 tcp=34 topuser=madalice 2026-08-29 01:17:42 L1=4.23 run=3 blk=0 avail=7102 (51.5%) swpO=0 conn=5 myRSS=2807 php=11 phpRSS=1491 ap=26 tcp=31 topuser=madalice 2026-08-29 01:17:43 L1=4.23 run=5 blk=0 avail=7089 (51.5%) swpO=0 conn=3 myRSS=2807 php=12 phpRSS=1554 ap=24 tcp=32 topuser=madalice