INCIDENT 2026-08-29 15:17:34 trigger: php_rss=2102MB ================================================================== load: 0.61 0.70 0.81 8/714 4141492 ncpu:10 mem_avail: 6442MB/13777MB (46.8%) swap_used:1487MB swapout:0/s blocked(D):0 running:14 iowait:0.0% steal:0.0% php: 13 procs / 2102MB heaviest user: madalice (10 procs, 2021MB) apache: 82 procs tcp_estab: 69 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2736 madalice 10 2018 nobody 81 1339 root 252 1066 netdata 7 196 mailman 20 190 cpanellogin 1 64 dovenull 6 54 wp-toolkit 3 43 lowrange 2 28 evolution 7 27 zabbix 1 22 dovecot 3 22 named 1 16 candyfabcom 1 14 kurri 1 13 mailnull 1 8 polkitd 1 6 nscd 1 5 sshd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 10 2036 root 1 27 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4305 MB Active(file): 4151 MB Inactive(file): 707 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 538 MB CommitLimit: 10984 MB Committed_AS: 9698 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-12:58:54 7112 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2802472 9.4 Ssl 1-12:58:23 /usr/sbin/mariadbd 4141428 510022 madalice 229396 121 R 00:01 php-fpm: pool madalice_com_au 4141429 510022 madalice 227584 111 S 00:01 php-fpm: pool madalice_com_au 4141427 510022 madalice 227224 114 R 00:01 php-fpm: pool madalice_com_au 4141317 510022 madalice 225888 47.5 R 00:08 php-fpm: pool madalice_com_au 4141316 510022 madalice 213184 45.1 R 00:08 php-fpm: pool madalice_com_au 1502903 1451906 root 193452 0.0 S 12:41:12 spamd child 508924 1 netdata 175556 2.0 Ssl 1-12:57:52 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 4141324 510022 madalice 161172 54.0 R 00:07 php-fpm: pool madalice_com_au 4141184 510022 madalice 160524 31.8 S 00:18 php-fpm: pool madalice_com_au 1502904 1451906 root 160168 0.0 S 12:41:12 spamd child 4141321 510022 madalice 159620 49.8 S 00:07 php-fpm: pool madalice_com_au 4141319 510022 madalice 159528 46.1 S 00:08 php-fpm: pool madalice_com_au 4141318 510022 madalice 159460 46.8 R 00:08 php-fpm: pool madalice_com_au 1451906 1 root 131568 0.0 Ss 12:54:27 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 103180 0.0 Ss 1-12:57:49 /usr/lib/systemd/systemd-journald 3899599 1353308 cpanellogin 66056 0.0 S 01:12:10 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 509236 509098 root 63320 0.0 Sl 1-12:57:49 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42328 0.1 Ss 38-12:36:15 cpsrvd (SSL) - waiting for connections 509640 508992 root 36824 0.0 Sl 1-12:57:47 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1451116 1 root 33348 0.0 Ss 12:55:20 lfd - sleeping 4141462 1469 root 28744 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 28324 0.0 Ss 1-12:57:45 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 25652 0.0 Ss 1-11:05:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 4103687 506832 nobody 23584 0.0 S 12:25 /usr/sbin/httpd -k start 4123565 506832 nobody 23488 0.1 S 04:44 /usr/sbin/httpd -k start 483898 1 zabbix 23312 0.2 Ssl 1-12:59:06 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 4124075 506832 nobody 23100 0.0 S 03:37 /usr/sbin/httpd -k start 4123553 506832 nobody 22956 0.1 S 04:44 /usr/sbin/httpd -k start 4123536 506832 nobody 22716 0.1 S 04:46 /usr/sbin/httpd -k start 1469 1 root 22396 0.1 Ss 61-05:07:44 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4124046 506832 nobody 22100 0.0 S 03:41 /usr/sbin/httpd -k start 4124909 506832 nobody 21732 0.2 S 02:37 /usr/sbin/httpd -k start 4140866 506832 nobody 21676 0.1 S 00:33 /usr/sbin/httpd -k start 4140867 506832 nobody 21468 0.1 S 00:33 /usr/sbin/httpd -k start 1463 1 root 21388 0.0 Ss 61-05:07:44 tailwatchd 4123535 506832 nobody 21224 0.2 S 04:46 /usr/sbin/httpd -k start 4123563 506832 nobody 20948 0.0 S 04:44 /usr/sbin/httpd -k start 4124892 506832 nobody 20648 0.3 S 02:38 /usr/sbin/httpd -k start 4140719 506832 nobody 20504 0.1 S 00:48 /usr/sbin/httpd -k start 4140924 506832 nobody 20176 0.0 S 00:32 /usr/sbin/httpd -k start 4141005 506832 nobody 20132 0.2 S 00:30 /usr/sbin/httpd -k start 4140922 506832 nobody 20088 0.0 S 00:32 /usr/sbin/httpd -k start 4141371 506832 nobody 19716 0.3 S 00:03 /usr/sbin/httpd -k start 4141330 506832 nobody 19380 0.3 S 00:06 /usr/sbin/httpd -k start 4141346 506832 nobody 19260 0.2 S 00:04 /usr/sbin/httpd -k start 4141348 506832 nobody 19256 0.5 S 00:04 /usr/sbin/httpd -k start 4141345 506832 nobody 19216 0.2 S 00:04 /usr/sbin/httpd -k start 4141347 506832 nobody 19212 0.2 S 00:04 /usr/sbin/httpd -k start 4141359 506832 nobody 19212 0.3 S 00:03 /usr/sbin/httpd -k start 4141349 506832 nobody 19132 0.2 S 00:04 /usr/sbin/httpd -k start 4141367 506832 nobody 19016 0.0 S 00:03 /usr/sbin/httpd -k start 4141368 506832 nobody 18976 0.0 S 00:03 /usr/sbin/httpd -k start 4141369 506832 nobody 18912 0.0 S 00:03 /usr/sbin/httpd -k start 4141343 506832 nobody 18880 0.0 S 00:04 /usr/sbin/httpd -k start 4141335 506832 nobody 18864 0.0 S 00:05 /usr/sbin/httpd -k start 4141370 506832 nobody 18840 0.0 S 00:03 /usr/sbin/httpd -k start 4141382 506832 nobody 17780 0.0 S 00:02 /usr/sbin/httpd -k start 4141395 506832 nobody 17780 0.0 S 00:02 /usr/sbin/httpd -k start 508634 1 named 17308 0.0 Ssl 1-12:57:57 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no --- processes in D state (uninterruptible IO) --- 3022244 D - [kworker/u256:0+flush-8:0] --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4068581 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 4068570 | madalice_wp | madalice_wp | Query | 0 | Preparing | SELECT a.action_id FROM AMuqf6qZ_actionscheduler_actions a WHERE 1=1 AND a.hook='wc_schedule_pending_batch_processes' AND a.status IN ('in-progress', 'pending') LIMIT 0, 1 | +---------+-------------+-------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 1072 infinium/infinium.net.au-ssl_log 173 madalice/madalice.com.au-ssl_log 151 olympic/seb-mobile-auth.olympicfencing.com.au-ssl_log 134 olympic/seb-mobile-auth.olympicfencing.com.au 131 bigdeals/bigdeals.com.au-ssl_log 59 speedlin/speedlinefencing.com.au-ssl_log 54 candyfabcom/candyfab.com.au-ssl_log 43 cosgrovecreative/cosgrovecreative.com.au-ssl_log 37 evolution/portal.evolutionerp.com.au-ssl_log 22 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 1072 40.115.94.245 265 4.204.200.136 138 20.104.18.15 113 52.139.37.240 104 67.223.118.81 95 158.23.184.117 43 20.63.81.20 22 203.54.180.238 3 35.231.130.18 3 15.235.140.103 2 57.129.136.36 2 195.88.87.110 2 193.70.46.29 2 114.119.140.234 2 114.119.131.88 --- top request paths across all vhosts (last 3 min) --- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 98 GET /wp-login.php 22 GET /heartbeat.php 15 POST /wp-login.php 9 GET /api/getItem/NA 6 GET /store/kids-swarovski-crystal-airmax90/ 6 GET /av.php 6 GET /admin.php 5 GET /new.php 5 GET /f35.php 4 GET /wp.php 4 GET /w.php 4 GET /wp-content/themes/index.php 4 GET /wp-content/plugins/hellopress/wp_filemanager.php 4 GET /this_is_a_new_hello_world.php 4 GET /shiny.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/RGW90 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/RGW100 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/RGW120 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/RGW160 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/RGW117T HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/RGW80 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/GP150x200x8 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:13 +1000] "GET /api/getItem/K125MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:14 +1000] "GET /api/getItem/253-40SP HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:15:16:14 +1000] "GET /api/getItem/300558 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == infinium/infinium.net.au-ssl_log == -- top paths -- 98 GET /wp-login.php 15 POST /wp-login.php 1 POST /wp-cron.php 1 GET /xmr.php 1 GET /xmlrpc.php 1 GET /wp-trackback.php 1 GET /wp.php 1 GET /wp-json/wp/v2/users/me 1 GET /wp-includes/themes/uploads/config.php 1 GET /wp-includes/theme-compat 1 GET /wp-includes/Text.php 1 GET /wp-includes/Text/Diff/ -- last 10 requests -- 67.223.118.81 - - [29/Aug/2026:15:17:04 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:04 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:04 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:04 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:05 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:05 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:05 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:05 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:05 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 67.223.118.81 - - [29/Aug/2026:15:17:05 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/kids-swarovski-crystal-airmax90/ 2 GET /ws55.php 2 GET /w.php 2 GET /wp-content/uploads/ 2 GET /vv.php 2 GET /sure.php 2 GET /store/personalised-bridal-socks/ 2 GET /special.php 2 GET /sonic.php 2 GET /shiny.php 2 GET /puki.php 2 GET /pop.php -- last 10 requests -- 20.104.18.15 - - [29/Aug/2026:15:17:07 +1000] "GET /222.php HTTP/1.1" 404 3421 "-" "-" 20.104.18.15 - - [29/Aug/2026:15:17:07 +1000] "GET /ops.php HTTP/1.1" 404 3421 "-" "-" 20.104.18.15 - - [29/Aug/2026:15:17:07 +1000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 3421 "-" "-" 20.104.18.15 - - [29/Aug/2026:15:17:08 +1000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 3421 "-" "-" 20.104.18.15 - - [29/Aug/2026:15:17:08 +1000] "GET /f.php HTTP/1.1" 404 3421 "-" "-" 20.104.18.15 - - [29/Aug/2026:15:17:08 +1000] "GET /1dfcd2d08f.php HTTP/1.1" 404 3421 "-" "-" 114.119.146.16 - - [29/Aug/2026:15:17:16 +1000] "GET /store/kids-swarovski-crystal-airmax90/?amp%3Brating=1&wcpr_rating=5&wcpr_verified=1 HTTP/1.1" 200 51222 "https://madalice.com.au/store/kids-swarovski-crystal-airmax90 35.231.130.18 - - [29/Aug/2026:15:17:27 +1000] "POST /graphql HTTP/1.1" 404 36645 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/53 35.231.130.18 - - [29/Aug/2026:15:17:29 +1000] "POST /api/graphql HTTP/1.1" 404 36648 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safar 35.231.130.18 - - [29/Aug/2026:15:17:31 +1000] "POST /v1/graphql HTTP/1.1" 404 36647 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari --- last 30 samples (run-up to this incident) --- 2026-08-29 15:15:13 L1=0.58 run=3 blk=0 avail=8305 (60.3%) swpO=1 conn=1 myRSS=2736 php=7 phpRSS=496 ap=22 tcp=30 topuser=alison 2026-08-29 15:15:14 L1=0.70 run=6 blk=0 avail=8298 (60.2%) swpO=1 conn=6 myRSS=2736 php=7 phpRSS=485 ap=22 tcp=32 topuser=evolution 2026-08-29 15:15:23 L1=0.80 run=4 blk=0 avail=8452 (61.3%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=268 ap=19 tcp=31 topuser=madalice 2026-08-29 15:15:24 L1=0.82 run=3 blk=0 avail=8432 (61.2%) swpO=0 conn=6 myRSS=2736 php=7 phpRSS=386 ap=19 tcp=33 topuser=evolution 2026-08-29 15:15:33 L1=0.83 run=3 blk=0 avail=8494 (61.7%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=235 ap=19 tcp=31 topuser=madalice 2026-08-29 15:15:34 L1=0.76 run=2 blk=0 avail=8505 (61.7%) swpO=0 conn=6 myRSS=2736 php=5 phpRSS=279 ap=19 tcp=35 topuser=madalice 2026-08-29 15:15:43 L1=1.02 run=1 blk=0 avail=8468 (61.5%) swpO=0 conn=1 myRSS=2736 php=5 phpRSS=317 ap=19 tcp=34 topuser=madalice 2026-08-29 15:15:44 L1=1.10 run=3 blk=0 avail=8334 (60.5%) swpO=0 conn=6 myRSS=2736 php=8 phpRSS=555 ap=19 tcp=35 topuser=evolution 2026-08-29 15:15:53 L1=1.17 run=2 blk=0 avail=8411 (61.0%) swpO=0 conn=1 myRSS=2736 php=5 phpRSS=401 ap=19 tcp=26 topuser=evolution 2026-08-29 15:15:54 L1=1.16 run=1 blk=0 avail=8383 (60.8%) swpO=0 conn=6 myRSS=2736 php=7 phpRSS=476 ap=19 tcp=28 topuser=evolution 2026-08-29 15:16:03 L1=1.23 run=2 blk=0 avail=8493 (61.6%) swpO=0 conn=1 myRSS=2736 php=3 phpRSS=259 ap=19 tcp=25 topuser=madalice 2026-08-29 15:16:04 L1=1.21 run=1 blk=0 avail=8523 (61.9%) swpO=0 conn=6 myRSS=2736 php=6 phpRSS=302 ap=19 tcp=26 topuser=madalice 2026-08-29 15:16:13 L1=1.19 run=1 blk=0 avail=8541 (62.0%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=217 ap=19 tcp=30 topuser=madalice 2026-08-29 15:16:14 L1=1.26 run=3 blk=0 avail=8476 (61.5%) swpO=0 conn=4 myRSS=2736 php=7 phpRSS=383 ap=19 tcp=34 topuser=madalice 2026-08-29 15:16:23 L1=1.24 run=1 blk=0 avail=8545 (62.0%) swpO=0 conn=1 myRSS=2736 php=3 phpRSS=199 ap=19 tcp=26 topuser=madalice 2026-08-29 15:16:24 L1=1.14 run=2 blk=0 avail=8516 (61.8%) swpO=0 conn=4 myRSS=2736 php=5 phpRSS=284 ap=19 tcp=28 topuser=madalice 2026-08-29 15:16:33 L1=1.05 run=1 blk=0 avail=8552 (62.1%) swpO=0 conn=1 myRSS=2736 php=3 phpRSS=198 ap=18 tcp=26 topuser=madalice 2026-08-29 15:16:34 L1=0.96 run=1 blk=0 avail=8525 (61.9%) swpO=0 conn=4 myRSS=2736 php=5 phpRSS=279 ap=18 tcp=27 topuser=madalice 2026-08-29 15:16:43 L1=0.88 run=2 blk=0 avail=8558 (62.1%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=238 ap=17 tcp=29 topuser=madalice 2026-08-29 15:16:44 L1=0.81 run=1 blk=0 avail=8534 (61.9%) swpO=0 conn=4 myRSS=2736 php=5 phpRSS=280 ap=17 tcp=31 topuser=madalice 2026-08-29 15:16:53 L1=0.75 run=1 blk=0 avail=8563 (62.2%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=215 ap=20 tcp=31 topuser=madalice 2026-08-29 15:16:54 L1=0.69 run=1 blk=0 avail=8547 (62.0%) swpO=0 conn=4 myRSS=2736 php=5 phpRSS=256 ap=20 tcp=33 topuser=madalice 2026-08-29 15:17:03 L1=0.63 run=1 blk=0 avail=8498 (61.7%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=215 ap=27 tcp=28 topuser=madalice 2026-08-29 15:17:04 L1=0.66 run=20 blk=0 avail=8300 (60.2%) swpO=0 conn=4 myRSS=2736 php=12 phpRSS=577 ap=27 tcp=48 topuser=infinium 2026-08-29 15:17:13 L1=0.63 run=1 blk=0 avail=8661 (62.9%) swpO=0 conn=1 myRSS=2736 php=3 phpRSS=82 ap=21 tcp=28 topuser=evolution 2026-08-29 15:17:14 L1=0.63 run=1 blk=0 avail=8658 (62.8%) swpO=0 conn=2 myRSS=2736 php=3 phpRSS=82 ap=20 tcp=29 topuser=evolution 2026-08-29 15:17:23 L1=0.54 run=1 blk=0 avail=8544 (62.0%) swpO=0 conn=1 myRSS=2736 php=4 phpRSS=216 ap=20 tcp=30 topuser=madalice 2026-08-29 15:17:24 L1=0.54 run=2 blk=0 avail=8544 (62.0%) swpO=0 conn=2 myRSS=2736 php=4 phpRSS=216 ap=20 tcp=32 topuser=madalice 2026-08-29 15:17:33 L1=0.61 run=18 blk=0 avail=7160 (52.0%) swpO=0 conn=14 myRSS=2736 php=15 phpRSS=1424 ap=83 tcp=74 topuser=madalice 2026-08-29 15:17:34 L1=0.61 run=14 blk=0 avail=6442 (46.8%) swpO=0 conn=10 myRSS=2736 php=13 phpRSS=2102 ap=82 tcp=69 topuser=madalice