INCIDENT 2026-08-29 11:46:53 trigger: php_rss=2421MB mysql_conn=16 ================================================================== load: 2.24 2.17 1.57 11/701 3420687 ncpu:10 mem_avail: 6756MB/13777MB (49.0%) swap_used:1348MB swapout:0/s blocked(D):0 running:17 iowait:0.3% steal:0.0% php: 24 procs / 2421MB heaviest user: infinium (16 procs, 1538MB) apache: 23 procs tcp_estab: 101 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2756 infinium 16 1632 root 285 1114 madalice 6 838 nobody 22 408 mailman 20 217 netdata 7 201 cpanellogin 1 101 dovenull 6 59 wp-toolkit 3 49 mailnull 3 37 evolution 7 29 dovecot 3 23 zabbix 1 22 named 1 15 candyfabcom 1 14 kurri 1 9 polkitd 1 7 nscd 1 5 rpc 1 4 --- php workers by user --- USER PROCS RSS_MB infinium 16 1659 madalice 6 838 root 1 30 evolution 1 14 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4246 MB Active(file): 3710 MB Inactive(file): 1199 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 635 MB CommitLimit: 10984 MB Committed_AS: 8966 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-09:28:13 7664 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2822752 10.0 Ssl 1-09:27:42 /usr/sbin/mariadbd 1502903 1451906 root 203496 0.1 S 09:10:31 spamd child 508924 1 netdata 177136 2.0 Ssl 1-09:27:11 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1502904 1451906 root 166380 0.0 S 09:10:31 spamd child 3388187 510022 madalice 165684 11.9 S 06:55 php-fpm: pool madalice_com_au 3387018 510022 madalice 164484 13.8 S 08:25 php-fpm: pool madalice_com_au 3387436 510022 madalice 159384 12.4 S 07:44 php-fpm: pool madalice_com_au 1451906 1 root 155216 0.0 Ss 09:23:46 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3403948 510022 madalice 136928 9.9 S 03:36 php-fpm: pool madalice_com_au 3420635 3418706 infinium 127040 54.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420637 3411393 infinium 126624 51.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420643 3412893 infinium 126544 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420642 3420592 infinium 126536 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420640 3420518 infinium 126448 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420639 3420263 infinium 125676 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420636 3404328 infinium 125060 51.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3387462 510022 madalice 123884 11.9 S 07:44 php-fpm: pool madalice_com_au 3420647 3420582 infinium 118860 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420641 3420545 infinium 113564 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3387052 510022 madalice 108056 12.8 S 08:17 php-fpm: pool madalice_com_au 2971632 1353308 cpanellogin 104244 0.0 S 02:09:58 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 3420645 3419023 infinium 102684 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420646 3418808 infinium 101820 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509266 1 root 95276 0.0 Ss 1-09:27:08 /usr/lib/systemd/systemd-journald 3420654 3420649 infinium 83824 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3420653 3420648 infinium 78180 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509236 509098 root 63760 0.0 Sl 1-09:27:08 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3420668 3420632 infinium 56644 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1353308 1 root 41892 0.1 Ss 38-09:05:34 cpsrvd (SSL) - waiting for connections 3420716 3420583 infinium 39188 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509640 508992 root 35804 0.0 Sl 1-09:27:06 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1451116 1 root 34516 0.0 Ss 09:24:39 lfd - sleeping 510022 1 root 30796 0.0 Ss 1-09:27:04 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 29168 0.0 Ss 1-07:34:45 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1469 1 root 23856 0.1 Ss 61-01:37:03 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 483898 1 zabbix 23492 0.2 Ssl 1-09:28:25 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3411393 506832 nobody 22000 0.5 S 01:47 /usr/sbin/httpd -k start 3419942 506832 nobody 21968 0.0 S 00:55 /usr/sbin/httpd -k start 3419004 506832 nobody 21864 0.0 S 01:40 /usr/sbin/httpd -k start 3418808 506832 nobody 21780 0.0 S 01:41 /usr/sbin/httpd -k start 1463 1 root 21720 0.0 Ss 61-01:37:03 tailwatchd 3420242 506832 nobody 21492 0.6 S 00:42 /usr/sbin/httpd -k start 3404034 506832 nobody 21336 0.0 S 03:26 /usr/sbin/httpd -k start 3404328 506832 nobody 21228 0.0 S 02:46 /usr/sbin/httpd -k start 3419023 506832 nobody 21212 0.3 S 01:39 /usr/sbin/httpd -k start 3412893 506832 nobody 20940 0.3 S 01:46 /usr/sbin/httpd -k start 3418706 506832 nobody 20840 0.3 S 01:42 /usr/sbin/httpd -k start 3420263 506832 nobody 20796 0.0 S 00:41 /usr/sbin/httpd -k start 3420264 506832 nobody 20536 0.0 S 00:41 /usr/sbin/httpd -k start 3420545 506832 nobody 20264 0.2 S 00:12 /usr/sbin/httpd -k start 3420592 506832 nobody 20132 0.2 S 00:05 /usr/sbin/httpd -k start 3420518 506832 nobody 20064 0.0 S 00:16 /usr/sbin/httpd -k start 3420582 506832 nobody 19812 0.1 S 00:08 /usr/sbin/httpd -k start 3420632 506832 nobody 19616 0.0 S 00:01 /usr/sbin/httpd -k start 938585 1 wp-toolkit 19104 0.0 Ss 1-07:34:45 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3420583 506832 nobody 18900 0.0 S 00:08 /usr/sbin/httpd -k start 509671 508992 netdata 17560 2.1 Sl 1-09:27:06 /usr/libexec/netdata/plugins.d/apps.plugin 1 3420484 508720 mailnull 17260 0.0 S 00:20 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3420648 506832 nobody 17072 0.0 S 00:00 /usr/sbin/httpd -k start 3420649 506832 nobody 17072 0.0 S 00:00 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3955607 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 1102 madalice/madalice.com.au-ssl_log 159 coscom/swms.coscom.com.au 135 olympic/olympicfencing.com.au-ssl_log 53 infinium/infinium.net.au-ssl_log 33 evolution/portal.evolutionerp.com.au-ssl_log 28 corpkicks/corporatekicks.com.au-ssl_log 26 kamcool/kamcool.com.au-ssl_log 23 olympic/olympicfencing.com.au 22 aaa/aaadownunder.com.au-ssl_log 15 corpkicks/corporatekicks.com.au 11 evolution/evolutionerp.com.au-ssl_log 11 evolution/my.evolutionerp.com.au-ssl_log 9 aaa/aaadownunder.com.au 7 alison/alisonarts.com.au-ssl_log 7 (total vhosts taking traffic: 18) --- top client IPs across all vhosts (last 3 min) --- 1102 40.115.94.245 136 140.245.103.252 135 20.63.81.20 66 20.220.204.93 37 136.108.71.68 34 118.127.40.55 33 68.65.121.193 28 203.54.180.238 20 52.139.37.240 12 143.244.57.120 6 66.29.132.180 6 198.177.120.86 3 40.77.167.14 3 178.34.162.162 3 157.55.39.200 --- top request paths across all vhosts (last 3 min) --- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 90 GET /wp-admin/index.php 80 POST /wp-login.php 33 GET /wp-login.php 28 GET /heartbeat.php 20 POST / 13 POST /wp-cron.php 9 GET /api/getItem/NA 5 POST /functions.php 4 GET /api/getItem/PWFBW3151KG 3 GET /xxw.php 3 GET /xsox.php 3 GET /xr.php 3 GET /wp-json/wp/v2/users/me 3 GET /wp-blogs.php 3 GET /wp-admin/css/colors/blue/about.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/PC15050 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/PC16 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/PC19 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/PC5025BL HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/PC7550 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/HCR-32 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/HCR-25 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/HCR-40 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:18 +1000] "GET /api/getItem/L2 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:11:46:19 +1000] "GET /api/getItem/FBM1230G HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 90 GET /wp-admin/index.php 46 POST /wp-login.php 18 POST / 1 GET /wp-json/wp/v2/product/31596 1 GET /product-tag/floral/ 1 GET /product-tag/cartoon/ 1 GET /product-category/customised-shoes/limited-edition/ 1 GET /design-your-own-shoes/ -- last 10 requests -- 140.245.103.252 - - [29/Aug/2026:11:46:30 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 6745 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) 140.245.103.252 - - [29/Aug/2026:11:46:31 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 6745 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) 140.245.103.252 - - [29/Aug/2026:11:46:32 +1000] "POST /wp-login.php HTTP/1.1" 503 6559 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Ver 140.245.103.252 - - [29/Aug/2026:11:46:33 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 6745 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers 140.245.103.252 - - [29/Aug/2026:11:46:34 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 6745 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers 140.245.103.252 - - [29/Aug/2026:11:46:35 +1000] "POST /wp-login.php HTTP/1.1" 503 6559 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0" 118.127.40.55 - - [29/Aug/2026:11:46:37 +1000] "POST /?wordfence_syncAttackData=1787967996.9692 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://madalice.com.au" 140.245.103.252 - - [29/Aug/2026:11:46:36 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 6745 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" 140.245.103.252 - - [29/Aug/2026:11:46:38 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 6745 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" 140.245.103.252 - - [29/Aug/2026:11:46:39 +1000] "POST /wp-login.php HTTP/1.1" 503 6559 "https://madalice.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Ver == coscom/swms.coscom.com.au == -- top paths -- 2 GET /goods.php 1 GET /zoo2.php 1 GET /zoo1.php 1 GET /xty.php 1 GET /x.php 1 GET /xmini4.php 1 GET /wsd.php 1 GET /ws85.php 1 GET /ws55.php 1 GET /wp-trackback.php 1 GET /wp-safe.php 1 GET /wp.php -- last 10 requests -- 20.63.81.20 - - [29/Aug/2026:11:45:22 +1000] "GET /blog.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:22 +1000] "GET /wp-admin/js/wp-load.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:22 +1000] "GET /robot.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:22 +1000] "GET /revo.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:22 +1000] "GET /birrs.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:23 +1000] "GET /sss.php?p= HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:23 +1000] "GET /wp-content/themes/gaukingo/ HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:23 +1000] "GET /wp-includes/ID3/moon.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:23 +1000] "GET /xmini4.php HTTP/1.1" 404 - "-" "-" 20.63.81.20 - - [29/Aug/2026:11:45:23 +1000] "GET /gulu.php HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-29 11:44:29 L1=1.81 run=2 blk=0 avail=7853 (57.0%) swpO=0 conn=3 myRSS=2810 php=8 phpRSS=832 ap=22 tcp=23 topuser=madalice 2026-08-29 11:44:31 L1=1.90 run=3 blk=0 avail=7755 (56.3%) swpO=0 conn=3 myRSS=2810 php=9 phpRSS=954 ap=22 tcp=22 topuser=madalice 2026-08-29 11:44:39 L1=1.75 run=1 blk=0 avail=7871 (57.1%) swpO=0 conn=3 myRSS=2810 php=8 phpRSS=816 ap=20 tcp=22 topuser=madalice 2026-08-29 11:44:41 L1=1.69 run=4 blk=0 avail=7826 (56.8%) swpO=0 conn=3 myRSS=2810 php=9 phpRSS=892 ap=20 tcp=24 topuser=madalice 2026-08-29 11:44:49 L1=1.55 run=3 blk=0 avail=7789 (56.5%) swpO=0 conn=3 myRSS=2810 php=9 phpRSS=927 ap=20 tcp=25 topuser=madalice 2026-08-29 11:44:51 L1=1.51 run=3 blk=0 avail=7763 (56.3%) swpO=0 conn=3 myRSS=2810 php=9 phpRSS=959 ap=20 tcp=21 topuser=madalice 2026-08-29 11:44:59 L1=1.63 run=3 blk=0 avail=7727 (56.1%) swpO=0 conn=3 myRSS=2810 php=10 phpRSS=1016 ap=19 tcp=25 topuser=madalice 2026-08-29 11:45:01 L1=2.46 run=6 blk=0 avail=7795 (56.6%) swpO=0 conn=3 myRSS=2810 php=10 phpRSS=921 ap=19 tcp=25 topuser=madalice 2026-08-29 11:45:10 L1=2.74 run=5 blk=0 avail=7629 (55.4%) swpO=0 conn=4 myRSS=2810 php=10 phpRSS=1063 ap=26 tcp=32 topuser=madalice 2026-08-29 11:45:11 L1=3.81 run=20 blk=0 avail=6597 (47.9%) swpO=0 conn=12 myRSS=2810 php=20 phpRSS=2443 ap=26 tcp=49 topuser=corpkicks 2026-08-29 11:45:20 L1=3.98 run=6 blk=0 avail=7459 (54.1%) swpO=2000 conn=2 myRSS=2756 php=11 phpRSS=1037 ap=39 tcp=39 topuser=madalice 2026-08-29 11:45:23 L1=4.30 run=2 blk=0 avail=7748 (56.2%) swpO=1667 conn=2 myRSS=2756 php=9 phpRSS=932 ap=36 tcp=36 topuser=madalice 2026-08-29 11:45:30 L1=4.20 run=3 blk=0 avail=7794 (56.6%) swpO=0 conn=2 myRSS=2756 php=10 phpRSS=984 ap=29 tcp=23 topuser=madalice 2026-08-29 11:45:33 L1=4.02 run=2 blk=0 avail=7853 (57.0%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=871 ap=26 tcp=17 topuser=madalice 2026-08-29 11:45:40 L1=3.70 run=2 blk=0 avail=7928 (57.5%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=887 ap=20 tcp=23 topuser=madalice 2026-08-29 11:45:43 L1=3.56 run=2 blk=0 avail=7964 (57.8%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=878 ap=18 tcp=21 topuser=madalice 2026-08-29 11:45:50 L1=3.44 run=2 blk=0 avail=7973 (57.9%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=853 ap=17 tcp=21 topuser=madalice 2026-08-29 11:45:53 L1=3.16 run=3 blk=0 avail=7987 (58.0%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=873 ap=16 tcp=21 topuser=madalice 2026-08-29 11:46:00 L1=3.15 run=3 blk=0 avail=7953 (57.7%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=892 ap=17 tcp=18 topuser=madalice 2026-08-29 11:46:03 L1=3.14 run=1 blk=0 avail=8001 (58.1%) swpO=0 conn=2 myRSS=2756 php=9 phpRSS=851 ap=16 tcp=18 topuser=madalice 2026-08-29 11:46:10 L1=3.29 run=4 blk=0 avail=7973 (57.9%) swpO=0 conn=1 myRSS=2756 php=9 phpRSS=887 ap=16 tcp=24 topuser=madalice 2026-08-29 11:46:13 L1=3.34 run=6 blk=0 avail=7671 (55.7%) swpO=0 conn=2 myRSS=2756 php=12 phpRSS=1101 ap=19 tcp=26 topuser=madalice 2026-08-29 11:46:20 L1=3.32 run=4 blk=0 avail=7959 (57.8%) swpO=0 conn=1 myRSS=2756 php=8 phpRSS=834 ap=20 tcp=18 topuser=madalice 2026-08-29 11:46:23 L1=3.21 run=3 blk=0 avail=7997 (58.0%) swpO=0 conn=3 myRSS=2756 php=9 phpRSS=866 ap=17 tcp=18 topuser=madalice 2026-08-29 11:46:30 L1=3.11 run=2 blk=0 avail=7989 (58.0%) swpO=0 conn=1 myRSS=2756 php=8 phpRSS=832 ap=16 tcp=21 topuser=madalice 2026-08-29 11:46:33 L1=2.86 run=2 blk=0 avail=7984 (57.9%) swpO=0 conn=3 myRSS=2756 php=9 phpRSS=872 ap=16 tcp=22 topuser=madalice 2026-08-29 11:46:40 L1=2.88 run=2 blk=0 avail=7884 (57.2%) swpO=0 conn=1 myRSS=2756 php=9 phpRSS=960 ap=16 tcp=23 topuser=madalice 2026-08-29 11:46:43 L1=2.65 run=2 blk=0 avail=7827 (56.8%) swpO=0 conn=3 myRSS=2756 php=11 phpRSS=1083 ap=17 tcp=30 topuser=madalice 2026-08-29 11:46:50 L1=2.43 run=3 blk=0 avail=7734 (56.1%) swpO=0 conn=1 myRSS=2756 php=11 phpRSS=1145 ap=21 tcp=29 topuser=madalice 2026-08-29 11:46:53 L1=2.24 run=17 blk=0 avail=6756 (49.0%) swpO=0 conn=16 myRSS=2756 php=24 phpRSS=2421 ap=23 tcp=101 topuser=infinium