INCIDENT 2026-08-30 00:27:50 trigger: php_rss=2102MB ================================================================== load: 2.65 1.40 1.55 11/720 1877201 ncpu:10 mem_avail: 6568MB/13777MB (47.7%) swap_used:1819MB swapout:0/s blocked(D):0 running:12 iowait:0.0% steal:0.0% php: 12 procs / 2102MB heaviest user: madalice (10 procs, 2065MB) apache: 78 procs tcp_estab: 58 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2596 madalice 10 1888 nobody 77 1304 root 246 1065 netdata 7 198 mailman 20 143 infinium 8 117 cpanellogin 1 63 dovenull 6 49 evolution 11 47 wp-toolkit 3 33 lowrange 2 29 kurri 2 27 zabbix 1 21 dovecot 3 20 named 1 15 aaa 1 14 mailnull 1 6 polkitd 1 5 nscd 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 10 1805 root 1 23 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5678 MB Active(file): 3351 MB Inactive(file): 2637 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 563 MB CommitLimit: 10984 MB Committed_AS: 9533 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-22:09:10 6600 /usr/bin/imunify-agent-proxy 1860610 root 05:51 59408 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2658972 8.3 Ssl 1-22:08:39 /usr/sbin/mariadbd 1876976 510022 madalice 249344 37.2 R 00:28 php-fpm: pool madalice_com_au 1877048 510022 madalice 217804 47.0 R 00:12 php-fpm: pool madalice_com_au 1876634 510022 madalice 204908 34.5 R 01:17 php-fpm: pool madalice_com_au 1877167 510022 madalice 181508 85.3 R 00:03 php-fpm: pool madalice_com_au 508924 1 netdata 181076 1.9 Ssl 1-22:08:08 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1877046 510022 madalice 179744 46.0 R 00:12 php-fpm: pool madalice_com_au 83639 1451906 root 169556 0.0 S 08:30:16 spamd child 1502904 1451906 root 161412 0.0 S 21:51:28 spamd child 1877047 510022 madalice 161216 41.6 R 00:12 php-fpm: pool madalice_com_au 1876722 510022 madalice 159828 43.7 R 01:00 php-fpm: pool madalice_com_au 1877049 510022 madalice 159696 41.7 S 00:12 php-fpm: pool madalice_com_au 1877168 510022 madalice 158988 84.6 S 00:03 php-fpm: pool madalice_com_au 1877169 510022 madalice 158964 84.3 S 00:03 php-fpm: pool madalice_com_au 509266 1 root 119296 0.0 Ss 1-22:08:05 /usr/lib/systemd/systemd-journald 1451906 1 root 113568 0.0 Ss 22:04:43 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1826111 1353308 cpanellogin 65008 0.0 S 16:07 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 1860610 1 root 59408 0.5 Ssl 05:51 /opt/imunify360/venv/bin/python3 -m imav.run 509236 509098 root 55580 0.0 Sl 1-22:08:05 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42128 0.1 Ss 38-21:46:31 cpsrvd (SSL) - waiting for connections 509640 508992 root 42004 0.0 Sl 1-22:08:03 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1777392 1 root 37296 0.0 Ss 27:48 lfd - sleeping 1469 1 root 25284 0.1 Ss 61-14:18:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 24192 0.0 Ss 1-22:08:01 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1861703 506832 nobody 23268 0.0 S 03:57 /usr/sbin/httpd -k start 1868829 506832 nobody 22856 0.0 S 02:44 /usr/sbin/httpd -k start 1861700 506832 nobody 22392 0.0 S 03:58 /usr/sbin/httpd -k start 1860880 506832 nobody 22256 0.0 S 05:37 /usr/sbin/httpd -k start 1876388 506832 nobody 22216 0.0 S 01:36 /usr/sbin/httpd -k start 483898 1 zabbix 22212 0.2 Ssl 1-22:09:22 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1861693 506832 nobody 21428 0.0 S 04:00 /usr/sbin/httpd -k start 1876746 506832 nobody 21296 0.1 S 00:59 /usr/sbin/httpd -k start 1876756 506832 nobody 21264 0.1 S 00:56 /usr/sbin/httpd -k start 1876844 506832 nobody 20720 0.1 S 00:46 /usr/sbin/httpd -k start 1876783 506832 nobody 20588 0.1 S 00:50 /usr/sbin/httpd -k start 1876755 506832 nobody 20568 0.2 S 00:56 /usr/sbin/httpd -k start 1463 1 root 20420 0.0 Ss 61-14:18:00 tailwatchd 1861691 506832 nobody 20364 0.0 S 04:00 /usr/sbin/httpd -k start 1876974 506832 nobody 20284 0.0 S 00:29 /usr/sbin/httpd -k start 1876849 506832 nobody 20172 0.0 S 00:45 /usr/sbin/httpd -k start 938582 1 wp-toolkit 19536 0.0 Ss 1-20:15:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1877152 506832 nobody 19220 0.1 S 00:06 /usr/sbin/httpd -k start 1877153 506832 nobody 19216 0.3 S 00:06 /usr/sbin/httpd -k start 1877155 506832 nobody 19216 0.3 S 00:06 /usr/sbin/httpd -k start 1877136 506832 nobody 19152 0.3 S 00:06 /usr/sbin/httpd -k start 1877156 506832 nobody 19152 0.3 S 00:06 /usr/sbin/httpd -k start 1877105 506832 nobody 19148 0.1 S 00:09 /usr/sbin/httpd -k start 1877108 506832 nobody 19148 0.1 S 00:08 /usr/sbin/httpd -k start 1876982 506832 nobody 19128 0.0 S 00:26 /usr/sbin/httpd -k start 1877107 506832 nobody 19124 0.1 S 00:08 /usr/sbin/httpd -k start 1877154 506832 nobody 19088 0.1 S 00:06 /usr/sbin/httpd -k start 1876750 506832 nobody 18948 0.0 S 00:57 /usr/sbin/httpd -k start 1877125 506832 nobody 17764 0.0 S 00:07 /usr/sbin/httpd -k start 1877124 506832 nobody 17712 0.0 S 00:07 /usr/sbin/httpd -k start 1877162 506832 nobody 16940 0.0 S 00:06 /usr/sbin/httpd -k start 1877113 506832 nobody 16900 0.1 S 00:08 /usr/sbin/httpd -k start 1877134 506832 nobody 16744 0.0 S 00:06 /usr/sbin/httpd -k start 1877159 506832 nobody 16744 0.0 S 00:06 /usr/sbin/httpd -k start 1877059 506832 nobody 16728 0.0 S 00:10 /usr/sbin/httpd -k start 1877062 506832 nobody 16728 0.0 S 00:10 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4257229 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 4257220 | madalice_wp | madalice_wp | Query | 0 | Sending data | SELECT AMuqf6qZ_posts.* FROM AMuqf6qZ_posts LEFT JOIN AMuqf6qZ_term_relationships ON (AMuqf6qZ_posts.ID = AMuqf6qZ_term_relationships.object_id) WHERE 1=1 AND ( AMuqf6qZ_term_relationships.term_taxonomy_id IN (132) ) AND AMuqf6qZ_posts.post_type = 'nav_menu_item' AND ((AMuqf6qZ_po | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min bigdeals/bigdeals.com.au-ssl_log 199 madalice/madalice.com.au-ssl_log 50 tubesupplies/tubesupplies.com.au-ssl_log 23 evolution/portal.evolutionerp.com.au-ssl_log 22 alison/alisonarts.com.au-ssl_log 13 lowrange/lowrange.com.au-ssl_log 8 corpkicks/corporatekicks.com.au-ssl_log 2 infinium/infinium.net.au-ssl_log 2 evolution/my.evolutionerp.com.au-ssl_log 1 otterfencing/otterfencing.com.au 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 199 34.130.67.92 36 52.139.37.240 22 203.54.180.238 7 35.231.130.18 7 31.59.160.30 3 114.119.146.16 2 72.167.132.114 2 54.156.55.147 2 217.113.194.235 2 217.113.194.162 2 180.102.110.149 2 118.127.40.55 1 98.82.59.253 1 91.92.243.239 1 66.132.195.123 --- top request paths across all vhosts (last 3 min) --- 22 GET /heartbeat.php 8 GET / 5 GET /store/customwarriors-kids/ 3 POST /cgi-sys/suspendedpage.cgi 2 POST /wp-login.php 2 POST / 2 GET /wp-login.php 2 GET /wp-json/gravitysmtp/v1/tests/mock-data 2 GET /index.php 2 GET /contact-our-airbrush-studio/ 1 POST /wp-cron.php 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 HEAD / 1 GET /zend/.env 1 GET /yii/.env 1 GET /xmrlpc.php 1 GET /www/.env 1 GET /wso112233.php --- busiest 3 vhosts: top paths + last 10 requests --- == bigdeals/bigdeals.com.au-ssl_log == -- top paths -- 3 POST /cgi-sys/suspendedpage.cgi 1 POST / 1 GET /zend/.env 1 GET /yii/.env 1 GET /www/.env 1 GET /wp/.env 1 GET /wordpress/.env 1 GET /web/.env 1 GET /vue/.env 1 GET /vite/.env 1 GET /vendor/.env 1 GET /var/www/html/.env -- last 10 requests -- 34.130.67.92 - - [30/Aug/2026:00:27:44 +1000] "GET /circleci/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:45 +1000] "GET /travis/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:45 +1000] "GET /buildkite/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:45 +1000] "GET /mysql/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:45 +1000] "GET /postgres/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:46 +1000] "GET /mongodb/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:46 +1000] "GET /redis/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:46 +1000] "GET /elasticsearch/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:46 +1000] "GET /rabbitmq/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.130.67.92 - - [30/Aug/2026:00:27:46 +1000] "GET /kafka/.env HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/customwarriors-kids/ 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /xmrlpc.php 1 GET /wso112233.php 1 GET /wp-signup.php 1 GET /wp.php 1 GET /wp-mail.php 1 GET /wp-login.php 1 GET /wp-cron.php 1 GET /wp-content/plugins/google-seo-rank/module.php -- last 10 requests -- 35.231.130.18 - - [30/Aug/2026:00:27:34 +1000] "GET / HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 52.139.37.240 - - [30/Aug/2026:00:27:34 +1000] "GET /wp-login.php HTTP/1.1" 200 4024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:00:27:35 +1000] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 404 36654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0. 35.231.130.18 - - [30/Aug/2026:00:27:38 +1000] "POST /graphql HTTP/1.1" 404 36650 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/53 35.231.130.18 - - [30/Aug/2026:00:27:41 +1000] "POST /api/graphql HTTP/1.1" 404 36654 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safar 35.231.130.18 - - [30/Aug/2026:00:27:43 +1000] "POST /v1/graphql HTTP/1.1" 404 36653 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari 114.119.143.104 - - [30/Aug/2026:00:27:47 +1000] "GET /store/customwarriors-kids/?amp%3Bwcpr_rating=3&verified=1&rating=2&wcpr_rating=5 HTTP/1.1" 404 36661 "https://madalice.com.au/store/customwarriors-kids/?amp%3Bwcpr_r 35.231.130.18 - - [30/Aug/2026:00:27:47 +1000] "GET /sign-in HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:00:27:47 +1000] "GET /secure HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:00:27:47 +1000] "GET /auth/login HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 1 GET /wp-content/plugins/elementor-pro/vendor_prefixed/php-di/phpdoc-reader/src/PhpDocReader/PhpParser/ 1 GET /wp-content/plugins/elementor-pro/vendor_prefixed/php-di/php-di/src/Factory/ 1 GET /wp-content/plugins/elementor-pro/vendor_prefixed/php-di/php-di/src/Definition/ObjectDefinition/ 1 GET /wp-content/plugins/elementor/modules/variables/transformers/ 1 GET /wp-content/plugins/elementor/modules/mcp/abilities/ 1 GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-types/primitives/ 1 GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-type-migrations/ 1 GET /wp-content/plugins/elementor/modules/atomic-widgets/elements/template-renderer/ 1 GET /wp-content/plugins/elementor/modules/atomic-widgets/elements/promotions/pro-promotion-data-preservation.php 1 GET /wp-content/plugins/elementor/modules/atomic-widgets/elements/flexbox/ 1 GET /wp-content/plugins/elementor/modules/atomic-widgets/elements/atomic-collection-loop/collection-loop-promotion.html.twig 1 GET /wp-content/plugins/elementor/core/files/assets/svg/ -- last 10 requests -- 44.212.131.50 - - [30/Aug/2026:00:25:56 +1000] "GET /wp-content/plugins/elementor/modules/variables/transformers/?C=M;O%3DD HTTP/1.1" 200 992 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/ 54.157.84.74 - - [30/Aug/2026:00:26:01 +1000] "GET /wp-content/plugins/elementor/modules/mcp/abilities/?C=M;O%3DD HTTP/1.1" 200 2110 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +htt 3.213.46.222 - - [30/Aug/2026:00:26:04 +1000] "GET /wp-content/plugins/elementor/core/common/modules/events-manager/?C=S;O%3DD HTTP/1.1" 200 978 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonb 34.196.237.236 - - [30/Aug/2026:00:26:08 +1000] "GET /wp-content/plugins/elementor/app/modules/import-export/runners/export/wp-content.php HTTP/1.1" 500 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatibl 52.7.13.143 - - [30/Aug/2026:00:26:12 +1000] "GET /wp-content/plugins/elementor-pro/vendor_prefixed/php-di/php-di/src/Definition/ObjectDefinition/?C=M;O%3DA HTTP/1.1" 200 1267 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, 34.226.89.140 - - [30/Aug/2026:00:26:16 +1000] "GET /wp-content/plugins/elementor/modules/atomic-widgets/elements/flexbox/?C=N;O%3DD HTTP/1.1" 200 1186 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; 52.45.77.169 - - [30/Aug/2026:00:26:21 +1000] "GET /wp-content/plugins/elementor/core/common/modules/connect/rest/readme.md HTTP/1.1" 200 2388 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot 98.82.59.253 - - [30/Aug/2026:00:26:24 +1000] "GET /wp-content/plugins/elementor/core/common/modules/finder/categories/?C=S;O%3DA HTTP/1.1" 200 1879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Ama 44.215.61.66 - - [30/Aug/2026:00:26:29 +1000] "GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-types/primitives/?C=M;O%3DD HTTP/1.1" 200 1596 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatib 52.4.76.156 - - [30/Aug/2026:00:26:32 +1000] "GET /wp-content/plugins/elementor/app/modules/onboarding/storage/entities/?C=S;O%3DA HTTP/1.1" 200 1190 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Am --- last 30 samples (run-up to this incident) --- 2026-08-30 00:25:29 L1=0.61 run=1 blk=0 avail=8730 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=170 ap=15 tcp=29 topuser=madalice 2026-08-30 00:25:30 L1=0.56 run=1 blk=0 avail=8730 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=170 ap=15 tcp=29 topuser=madalice 2026-08-30 00:25:39 L1=0.68 run=1 blk=0 avail=8726 (63.3%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=170 ap=16 tcp=29 topuser=madalice 2026-08-30 00:25:40 L1=0.62 run=1 blk=0 avail=8725 (63.3%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=170 ap=16 tcp=28 topuser=madalice 2026-08-30 00:25:50 L1=0.57 run=1 blk=0 avail=8733 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=169 ap=15 tcp=28 topuser=madalice 2026-08-30 00:25:50 L1=0.53 run=1 blk=0 avail=8733 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=169 ap=15 tcp=28 topuser=madalice 2026-08-30 00:26:00 L1=0.48 run=1 blk=0 avail=8733 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=169 ap=15 tcp=25 topuser=madalice 2026-08-30 00:26:00 L1=0.45 run=1 blk=0 avail=8734 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=169 ap=15 tcp=25 topuser=madalice 2026-08-30 00:26:10 L1=0.41 run=2 blk=0 avail=8699 (63.1%) swpO=0 conn=2 myRSS=2596 php=3 phpRSS=217 ap=13 tcp=27 topuser=madalice 2026-08-30 00:26:10 L1=0.46 run=4 blk=0 avail=8708 (63.2%) swpO=0 conn=1 myRSS=2596 php=4 phpRSS=238 ap=13 tcp=28 topuser=madalice 2026-08-30 00:26:20 L1=0.50 run=5 blk=0 avail=8509 (61.8%) swpO=0 conn=2 myRSS=2596 php=6 phpRSS=489 ap=14 tcp=29 topuser=alison 2026-08-30 00:26:20 L1=0.62 run=2 blk=0 avail=8646 (62.8%) swpO=0 conn=1 myRSS=2596 php=4 phpRSS=292 ap=14 tcp=28 topuser=madalice 2026-08-30 00:26:30 L1=0.57 run=1 blk=0 avail=8733 (63.4%) swpO=0 conn=2 myRSS=2596 php=3 phpRSS=169 ap=14 tcp=31 topuser=madalice 2026-08-30 00:26:30 L1=0.61 run=1 blk=0 avail=8733 (63.4%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=169 ap=14 tcp=32 topuser=madalice 2026-08-30 00:26:40 L1=0.56 run=1 blk=0 avail=8727 (63.3%) swpO=0 conn=2 myRSS=2596 php=3 phpRSS=169 ap=14 tcp=30 topuser=madalice 2026-08-30 00:26:40 L1=0.51 run=2 blk=0 avail=8726 (63.3%) swpO=0 conn=1 myRSS=2596 php=3 phpRSS=169 ap=14 tcp=31 topuser=madalice 2026-08-30 00:26:50 L1=0.47 run=2 blk=0 avail=8758 (63.6%) swpO=0 conn=2 myRSS=2596 php=3 phpRSS=147 ap=13 tcp=31 topuser=madalice 2026-08-30 00:26:51 L1=0.43 run=5 blk=0 avail=8734 (63.4%) swpO=0 conn=1 myRSS=2596 php=4 phpRSS=191 ap=13 tcp=33 topuser=madalice 2026-08-30 00:27:00 L1=0.48 run=3 blk=0 avail=8540 (62.0%) swpO=0 conn=2 myRSS=2596 php=4 phpRSS=356 ap=17 tcp=36 topuser=madalice 2026-08-30 00:27:01 L1=0.60 run=4 blk=0 avail=8442 (61.3%) swpO=0 conn=1 myRSS=2596 php=4 phpRSS=459 ap=18 tcp=36 topuser=madalice 2026-08-30 00:27:10 L1=0.79 run=5 blk=0 avail=8340 (60.5%) swpO=1 conn=5 myRSS=2596 php=7 phpRSS=616 ap=21 tcp=40 topuser=madalice 2026-08-30 00:27:11 L1=1.05 run=6 blk=0 avail=8229 (59.7%) swpO=1 conn=1 myRSS=2596 php=8 phpRSS=755 ap=21 tcp=44 topuser=madalice 2026-08-30 00:27:20 L1=1.05 run=3 blk=0 avail=8481 (61.6%) swpO=0 conn=5 myRSS=2596 php=4 phpRSS=378 ap=20 tcp=40 topuser=madalice 2026-08-30 00:27:21 L1=1.12 run=2 blk=0 avail=8493 (61.6%) swpO=0 conn=1 myRSS=2596 php=4 phpRSS=364 ap=20 tcp=42 topuser=madalice 2026-08-30 00:27:30 L1=1.25 run=2 blk=0 avail=8327 (60.4%) swpO=0 conn=5 myRSS=2596 php=5 phpRSS=537 ap=22 tcp=40 topuser=madalice 2026-08-30 00:27:31 L1=1.25 run=1 blk=0 avail=8354 (60.6%) swpO=0 conn=1 myRSS=2596 php=5 phpRSS=505 ap=22 tcp=39 topuser=madalice 2026-08-30 00:27:40 L1=1.43 run=2 blk=0 avail=7920 (57.5%) swpO=0 conn=5 myRSS=2596 php=9 phpRSS=1015 ap=23 tcp=61 topuser=madalice 2026-08-30 00:27:41 L1=1.43 run=2 blk=0 avail=7920 (57.5%) swpO=0 conn=1 myRSS=2596 php=9 phpRSS=1017 ap=23 tcp=63 topuser=madalice 2026-08-30 00:27:50 L1=2.65 run=12 blk=0 avail=6568 (47.7%) swpO=0 conn=9 myRSS=2596 php=12 phpRSS=2102 ap=78 tcp=58 topuser=madalice 2026-08-30 00:27:51 L1=2.65 run=11 blk=0 avail=6844 (49.7%) swpO=0 conn=5 myRSS=2596 php=12 phpRSS=1780 ap=78 tcp=59 topuser=madalice