INCIDENT 2026-08-29 16:39:49 trigger: php_rss=1613MB ================================================================== load: 2.15 1.45 1.20 3/657 220522 ncpu:10 mem_avail: 7235MB/13777MB (52.5%) swap_used:1484MB swapout:0/s blocked(D):0 running:6 iowait:0.0% steal:0.0% php: 12 procs / 1613MB heaviest user: madalice (10 procs, 1571MB) apache: 24 procs tcp_estab: 30 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2805 madalice 11 1588 root 253 1032 nobody 23 420 netdata 7 199 mailman 20 190 cpanellogin 1 62 dovenull 6 56 wp-toolkit 3 43 mailnull 3 30 evolution 7 27 zabbix 1 24 dovecot 3 22 named 1 16 vinesit 1 14 corpkicks 1 14 kurri 1 13 polkitd 1 6 nscd 1 5 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 10 1576 root 1 27 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4579 MB Active(file): 4326 MB Inactive(file): 817 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 557 MB CommitLimit: 10984 MB Committed_AS: 8140 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-14:21:09 7112 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2872760 9.2 Ssl 1-14:20:38 /usr/sbin/mariadbd 219564 510022 madalice 182972 20.9 R 01:10 php-fpm: pool madalice_com_au 508924 1 netdata 178900 2.0 Ssl 1-14:20:07 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 219600 510022 madalice 162288 16.9 S 01:06 php-fpm: pool madalice_com_au 1502904 1451906 root 161200 0.0 S 14:03:27 spamd child 219565 510022 madalice 160780 19.6 S 01:10 php-fpm: pool madalice_com_au 219355 510022 madalice 160392 18.7 S 01:29 php-fpm: pool madalice_com_au 219598 510022 madalice 160332 18.4 S 01:06 php-fpm: pool madalice_com_au 218601 510022 madalice 160048 15.1 S 03:06 php-fpm: pool madalice_com_au 219561 510022 madalice 159948 20.0 S 01:10 php-fpm: pool madalice_com_au 219566 510022 madalice 159544 18.7 S 01:10 php-fpm: pool madalice_com_au 219563 510022 madalice 159416 20.8 S 01:10 php-fpm: pool madalice_com_au 219601 510022 madalice 158556 17.1 R 01:05 php-fpm: pool madalice_com_au 83639 1451906 root 147316 0.0 S 42:15 spamd child 1451906 1 root 132048 0.0 Ss 14:16:42 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 108224 0.0 Ss 1-14:20:04 /usr/lib/systemd/systemd-journald 509236 509098 root 64304 0.0 Sl 1-14:20:04 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 133529 1353308 cpanellogin 63724 0.0 S 28:07 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1353308 1 root 42376 0.1 Ss 38-13:58:30 cpsrvd (SSL) - waiting for connections 509640 508992 root 37616 0.0 Sl 1-14:20:02 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1451116 1 root 33368 0.0 Ss 14:17:35 lfd - sleeping 510022 1 root 28324 0.0 Ss 1-14:20:00 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 25652 0.0 Ss 1-12:27:41 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 483898 1 zabbix 24688 0.2 Ssl 1-14:21:21 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 218380 506832 nobody 23256 0.0 S 03:22 /usr/sbin/httpd -k start 218552 506832 nobody 22924 0.0 S 03:08 /usr/sbin/httpd -k start 1469 1 root 22400 0.1 Ss 61-06:29:59 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 218468 506832 nobody 21520 0.0 S 03:10 /usr/sbin/httpd -k start 1463 1 root 21388 0.0 Ss 61-06:29:59 tailwatchd 219603 506832 nobody 21304 0.0 S 01:05 /usr/sbin/httpd -k start 218531 506832 nobody 21284 0.0 S 03:08 /usr/sbin/httpd -k start 219631 506832 nobody 21236 0.0 S 01:02 /usr/sbin/httpd -k start 219611 506832 nobody 21212 0.0 S 01:03 /usr/sbin/httpd -k start 219608 506832 nobody 20772 0.1 S 01:04 /usr/sbin/httpd -k start 218511 506832 nobody 20764 0.0 S 03:09 /usr/sbin/httpd -k start 219628 506832 nobody 20760 0.0 S 01:02 /usr/sbin/httpd -k start 219620 506832 nobody 20600 0.0 S 01:02 /usr/sbin/httpd -k start 219612 506832 nobody 20436 0.0 S 01:03 /usr/sbin/httpd -k start 219617 506832 nobody 19596 0.0 S 01:03 /usr/sbin/httpd -k start 220413 506832 nobody 19396 0.2 S 00:12 /usr/sbin/httpd -k start 220455 506832 nobody 19256 0.1 S 00:10 /usr/sbin/httpd -k start 219599 506832 nobody 18868 0.0 S 01:06 /usr/sbin/httpd -k start 218474 506832 nobody 18768 0.0 S 03:10 /usr/sbin/httpd -k start 220488 506832 nobody 18676 0.0 S 00:08 /usr/sbin/httpd -k start 220414 506832 nobody 17536 0.0 S 00:12 /usr/sbin/httpd -k start 508634 1 named 17400 0.0 Ssl 1-14:20:12 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 218367 506832 nobody 17180 0.0 S 03:28 /usr/sbin/httpd -k start 509671 508992 netdata 17068 2.1 Sl 1-14:20:02 /usr/libexec/netdata/plugins.d/apps.plugin 1 220411 506832 nobody 16632 0.0 S 00:13 /usr/sbin/httpd -k start 938585 1 wp-toolkit 16232 0.0 Ss 1-12:27:41 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2766563 1471 root 16228 0.0 S 08:02:01 cPhulkd - dbprocessor 1471 1 root 16036 0.0 Ss 61-06:29:59 cPhulkd - processor 220452 508511 madalice 14720 0.0 S 00:10 dovecot/imap 220449 508511 corpkicks 14636 0.0 S 00:10 dovecot/imap 220451 508511 vinesit 14508 0.3 S 00:10 dovecot/imap 481558 1 root 14480 0.1 Ssl 1-14:22:31 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 4180059 4180015 evolution 14244 0.0 Ss 1-16:39:49 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 3883280 508511 kurri 13844 0.0 S 02:37:59 dovecot/imap 220446 508511 root 13256 0.1 S 00:10 dovecot/auth -w 220445 508511 root 13252 0.1 S 00:10 dovecot/auth -w --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4101877 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 115 evolution/portal.evolutionerp.com.au-ssl_log 24 kurri/kurrimotorinn.com.au-ssl_log 21 infinium/infinium.net.au-ssl_log 7 corpkicks/corporatekicks.com.au-ssl_log 3 evolution/my.evolutionerp.com.au-ssl_log 2 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 52 35.231.130.18 38 158.23.184.117 25 203.54.180.238 4 50.6.169.131 3 209.42.20.222 3 118.127.40.55 2 5.37.171.246 2 34.196.51.17 2 2001:8003:3322:4e00:1184:781b:3fcd:7b4f 2 192.250.232.93 2 181.91.87.135 2 179.165.13.72 2 177.37.175.150 2 170.64.135.172 2 169.58.140.248 --- top request paths across all vhosts (last 3 min) --- 24 GET /heartbeat.php 6 GET /wp-login.php 3 POST /wp-login.php 3 POST /graphql 3 GET /store/hand-painted-nike-af1-titans/ 3 GET /store/hand-painted-nike-af1-thornrose/ 3 GET / 2 POST /api/graphql 2 POST / 2 HEAD / 2 GET /wp-json/wp/v2/posts 2 GET /wp-json/buddypress/v1/members 2 GET /wp-admin/ 2 GET /users/login 2 GET /user/login 2 GET /signup 2 GET /signin 2 GET /sign-in 2 GET /secure 2 GET /reset-password --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /wp-login.php 3 GET /store/hand-painted-nike-af1-titans/ 3 GET /store/hand-painted-nike-af1-thornrose/ 2 GET /wp-admin/ 2 GET /users/login 2 GET /user/login 2 GET /signup 2 GET /signin 2 GET /sign-in 2 GET /secure 2 GET /reset-password 2 GET /register -- last 10 requests -- 158.23.184.117 - - [29/Aug/2026:16:39:30 +1000] "GET /term.php HTTP/1.1" 404 36606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:39:32 +1000] "GET /Ov-Simple1.php HTTP/1.1" 404 36615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:39:33 +1000] "GET /atomlib.php HTTP/1.1" 404 36626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:39:35 +1000] "GET /edit.php HTTP/1.1" 404 36620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 114.119.143.14 - - [29/Aug/2026:16:39:35 +1000] "GET /store/hand-painted-nike-af1-thegang/?wcpr_image=1&wcpr_page=2&verified=1&wcpr_rating=5 HTTP/1.1" 404 36670 "https://madalice.com.au/store/hand-painted-nike-af1-thegan 5.37.171.246 - - [29/Aug/2026:16:39:36 +1000] "GET /store/nike-af1-mad-hatter HTTP/1.1" 301 1 "https://madalice.com.au/product-category/process/painted" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 158.23.184.117 - - [29/Aug/2026:16:39:36 +1000] "GET /7.php HTTP/1.1" 404 36620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 39.35.196.115 - - [29/Aug/2026:16:39:37 +1000] "GET /store/colour-choice-sketchy-cacartoon-sketch-shoes HTTP/1.1" 301 1 "https://madalice.com.au/product-category/customised-shoes/cartoon" "Mozilla/5.0 (X11; Ubuntu; Linux 158.23.184.117 - - [29/Aug/2026:16:39:38 +1000] "GET /black.php HTTP/1.1" 404 36609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 5.37.171.246 - - [29/Aug/2026:16:39:38 +1000] "GET /store/nike-af1-mad-hatter/ HTTP/1.1" 200 52713 "https://madalice.com.au/product-category/process/painted" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/201 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 24 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [29/Aug/2026:16:38:13 +1000] "GET /heartbeat.php?sentAt=1787985494&bytes=106,146,126,86&_=1787897049200 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [29/Aug/2026:16:38:13 +1000] "GET /heartbeat.php?sentAt=1787985494&bytes=106,146,126,86&_=1787918087685 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [29/Aug/2026:16:38:23 +1000] "GET /heartbeat.php?sentAt=1787985504&bytes=106,146,126,96&_=1787897049201 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [29/Aug/2026:16:38:23 +1000] "GET /heartbeat.php?sentAt=1787985504&bytes=106,146,126,96&_=1787918087686 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [29/Aug/2026:16:38:33 +1000] "GET /heartbeat.php?sentAt=1787985514&bytes=106,146,126,106&_=1787897049202 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:16:38:33 +1000] "GET /heartbeat.php?sentAt=1787985514&bytes=106,146,126,106&_=1787918087687 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:16:38:45 +1000] "GET /heartbeat.php?sentAt=1787985524&bytes=106,146,126,116&_=1787897049203 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:16:38:45 +1000] "GET /heartbeat.php?sentAt=1787985524&bytes=106,146,126,116&_=1787918087688 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:16:38:53 +1000] "GET /heartbeat.php?sentAt=1787985534&bytes=106,146,126,126&_=1787897049204 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:16:38:53 +1000] "GET /heartbeat.php?sentAt=1787985534&bytes=106,146,126,126&_=1787918087689 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == kurri/kurrimotorinn.com.au-ssl_log == -- top paths -- 2 POST /graphql 2 GET /wp-json/wp/v2/posts 2 GET /wp-json/buddypress/v1/members 2 GET /author-sitemap.xml 1 POST /xmlrpc.php 1 POST /api/graphql 1 GET /wp-sitemap-users-1.xml 1 GET /wp-json/wp/v2/users 1 GET /wp-json/oembed/1.0/embed 1 GET /wp-json/ldlms/v2/users 1 GET /wp-json/ 1 GET /sitemap_index.xml -- last 10 requests -- 13.140.187.88 - - [29/Aug/2026:16:38:41 +1000] "POST /graphql HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Windows N 103.156.21.26 - - [29/Aug/2026:16:38:42 +1000] "GET /author-sitemap.xml HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 192.250.239.59 - - [29/Aug/2026:16:38:43 +1000] "POST /api/graphql HTTP/1.1" 301 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Maci 84.246.212.174 - - [29/Aug/2026:16:38:48 +1000] "GET /wp-json/ldlms/v2/users?per_page=100&_fields=user_login HTTP/1.1" 301 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 69.49.241.76 - - [29/Aug/2026:16:38:51 +1000] "GET /wp-json/buddypress/v1/members?per_page=100&_fields=user_login HTTP/1.1" 301 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 50.6.169.131 - - [29/Aug/2026:16:38:53 +1000] "GET /wp-json/buddypress/v1/members?per_page=100&_fields=user_login HTTP/1.1" 301 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 50.6.200.195 - - [29/Aug/2026:16:38:59 +1000] "GET /sitemap_index.xml HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (M 192.250.232.93 - - [29/Aug/2026:16:39:13 +1000] "GET /feed/json/ HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Macint 50.6.169.131 - - [29/Aug/2026:16:39:13 +1000] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug,locale HTTP/1.1" 301 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151. 50.6.169.131 - - [29/Aug/2026:16:39:14 +1000] "POST /xmlrpc.php HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Windows --- last 30 samples (run-up to this incident) --- 2026-08-29 16:37:19 L1=0.79 run=1 blk=0 avail=7604 (55.2%) swpO=0 conn=1 myRSS=2805 php=5 phpRSS=511 ap=109 tcp=25 topuser=madalice 2026-08-29 16:37:28 L1=0.73 run=1 blk=0 avail=7791 (56.6%) swpO=0 conn=1 myRSS=2805 php=4 phpRSS=354 ap=101 tcp=22 topuser=madalice 2026-08-29 16:37:29 L1=0.67 run=1 blk=0 avail=7804 (56.6%) swpO=0 conn=1 myRSS=2805 php=4 phpRSS=354 ap=99 tcp=19 topuser=madalice 2026-08-29 16:37:38 L1=0.70 run=1 blk=0 avail=7889 (57.3%) swpO=0 conn=1 myRSS=2805 php=4 phpRSS=323 ap=91 tcp=31 topuser=madalice 2026-08-29 16:37:40 L1=0.64 run=1 blk=0 avail=8009 (58.1%) swpO=0 conn=1 myRSS=2805 php=3 phpRSS=198 ap=89 tcp=23 topuser=madalice 2026-08-29 16:37:48 L1=0.67 run=2 blk=0 avail=7931 (57.6%) swpO=0 conn=1 myRSS=2805 php=4 phpRSS=352 ap=81 tcp=25 topuser=madalice 2026-08-29 16:37:50 L1=0.70 run=2 blk=0 avail=7977 (57.9%) swpO=0 conn=1 myRSS=2805 php=4 phpRSS=320 ap=79 tcp=23 topuser=madalice 2026-08-29 16:37:58 L1=0.64 run=2 blk=0 avail=8116 (58.9%) swpO=0 conn=2 myRSS=2805 php=3 phpRSS=206 ap=71 tcp=26 topuser=madalice 2026-08-29 16:38:00 L1=0.59 run=1 blk=0 avail=8145 (59.1%) swpO=0 conn=1 myRSS=2805 php=3 phpRSS=198 ap=69 tcp=22 topuser=madalice 2026-08-29 16:38:08 L1=0.54 run=1 blk=0 avail=8207 (59.6%) swpO=0 conn=2 myRSS=2805 php=3 phpRSS=198 ap=61 tcp=24 topuser=madalice 2026-08-29 16:38:10 L1=0.58 run=2 blk=0 avail=8220 (59.7%) swpO=0 conn=1 myRSS=2805 php=3 phpRSS=198 ap=59 tcp=23 topuser=madalice 2026-08-29 16:38:18 L1=0.53 run=2 blk=0 avail=8146 (59.1%) swpO=0 conn=2 myRSS=2805 php=4 phpRSS=356 ap=51 tcp=26 topuser=alison 2026-08-29 16:38:20 L1=0.65 run=2 blk=0 avail=8093 (58.7%) swpO=0 conn=1 myRSS=2805 php=5 phpRSS=446 ap=49 tcp=27 topuser=infinium 2026-08-29 16:38:28 L1=0.60 run=1 blk=0 avail=8210 (59.6%) swpO=0 conn=2 myRSS=2805 php=4 phpRSS=353 ap=41 tcp=25 topuser=madalice 2026-08-29 16:38:30 L1=0.55 run=2 blk=0 avail=8177 (59.4%) swpO=0 conn=1 myRSS=2805 php=5 phpRSS=430 ap=39 tcp=22 topuser=madalice 2026-08-29 16:38:38 L1=0.59 run=1 blk=0 avail=8290 (60.2%) swpO=0 conn=2 myRSS=2805 php=4 phpRSS=353 ap=31 tcp=22 topuser=madalice 2026-08-29 16:38:40 L1=1.18 run=8 blk=0 avail=7661 (55.6%) swpO=0 conn=8 myRSS=2805 php=9 phpRSS=1098 ap=29 tcp=27 topuser=madalice 2026-08-29 16:38:48 L1=2.29 run=11 blk=0 avail=6727 (48.8%) swpO=0 conn=10 myRSS=2805 php=12 phpRSS=1974 ap=60 tcp=57 topuser=madalice 2026-08-29 16:38:50 L1=3.22 run=18 blk=0 avail=6970 (50.6%) swpO=0 conn=8 myRSS=2805 php=12 phpRSS=1641 ap=59 tcp=62 topuser=madalice 2026-08-29 16:38:59 L1=3.05 run=2 blk=0 avail=7048 (51.2%) swpO=0 conn=1 myRSS=2805 php=12 phpRSS=1604 ap=52 tcp=31 topuser=madalice 2026-08-29 16:39:00 L1=2.88 run=4 blk=0 avail=6995 (50.8%) swpO=0 conn=3 myRSS=2805 php=12 phpRSS=1674 ap=51 tcp=28 topuser=madalice 2026-08-29 16:39:09 L1=2.73 run=2 blk=0 avail=7116 (51.7%) swpO=3 conn=2 myRSS=2805 php=12 phpRSS=1613 ap=42 tcp=28 topuser=madalice 2026-08-29 16:39:10 L1=2.51 run=4 blk=1 avail=7027 (51.0%) swpO=3 conn=3 myRSS=2805 php=13 phpRSS=1725 ap=41 tcp=28 topuser=madalice 2026-08-29 16:39:19 L1=2.55 run=3 blk=0 avail=7187 (52.2%) swpO=0 conn=3 myRSS=2805 php=12 phpRSS=1609 ap=32 tcp=32 topuser=madalice 2026-08-29 16:39:20 L1=2.51 run=6 blk=0 avail=7133 (51.8%) swpO=0 conn=3 myRSS=2805 php=13 phpRSS=1700 ap=31 tcp=32 topuser=madalice 2026-08-29 16:39:29 L1=2.31 run=2 blk=0 avail=7263 (52.7%) swpO=0 conn=2 myRSS=2805 php=12 phpRSS=1605 ap=24 tcp=28 topuser=madalice 2026-08-29 16:39:30 L1=2.20 run=1 blk=0 avail=7264 (52.7%) swpO=0 conn=1 myRSS=2805 php=12 phpRSS=1605 ap=23 tcp=26 topuser=madalice 2026-08-29 16:39:39 L1=2.18 run=3 blk=0 avail=7142 (51.8%) swpO=0 conn=3 myRSS=2805 php=12 phpRSS=1716 ap=25 tcp=35 topuser=madalice 2026-08-29 16:39:40 L1=2.25 run=5 blk=0 avail=7070 (51.3%) swpO=0 conn=2 myRSS=2805 php=12 phpRSS=1767 ap=26 tcp=39 topuser=madalice 2026-08-29 16:39:49 L1=2.15 run=6 blk=0 avail=7235 (52.5%) swpO=0 conn=3 myRSS=2805 php=12 phpRSS=1613 ap=24 tcp=30 topuser=madalice