INCIDENT 2026-08-30 09:14:54 trigger: php_rss=1631MB ================================================================== load: 1.42 1.07 1.08 5/720 3671355 ncpu:10 mem_avail: 6858MB/13777MB (49.8%) swap_used:1854MB swapout:0/s blocked(D):0 running:4 iowait:0.2% steal:0.0% php: 14 procs / 1631MB heaviest user: madalice (7 procs, 1095MB) apache: 81 procs tcp_estab: 71 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2864 nobody 80 1259 root 250 1123 madalice 7 1095 corpkicks 2 337 netdata 7 196 infinium 3 141 mailman 20 121 mailnull 5 105 evolution 7 103 cpanellogin 1 75 dovenull 6 46 kurri 3 40 wp-toolkit 3 31 lowrange 2 28 zabbix 1 21 dovecot 3 19 named 1 15 candyfabcom 1 14 alison 1 14 --- php workers by user --- USER PROCS RSS_MB madalice 7 1095 corpkicks 2 340 infinium 1 103 evolution 3 94 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5000 MB Active(file): 4386 MB Inactive(file): 1037 MB Dirty: 124 MB Writeback: 0 MB SReclaimable: 609 MB CommitLimit: 10984 MB Committed_AS: 9551 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-06:56:14 7724 /usr/bin/imunify-agent-proxy 3621101 root 14:52 1268 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2933568 7.5 Ssl 2-06:55:43 /usr/sbin/mariadbd 3671098 3670251 corpkicks 296032 13.9 S 00:21 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2328310 2277352 root 188484 0.0 S 06:36:43 spamd child 508924 1 netdata 176512 1.9 Ssl 2-06:55:12 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175580 0.0 Ss 06:51:49 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 167656 0.0 S 06:36:43 spamd child 3669630 510022 madalice 164412 10.6 S 03:17 php-fpm: pool madalice_com_au 3671062 510022 madalice 161968 18.0 S 00:25 php-fpm: pool madalice_com_au 3671211 510022 madalice 159332 50.1 S 00:07 php-fpm: pool madalice_com_au 3671210 510022 madalice 159076 34.2 S 00:07 php-fpm: pool madalice_com_au 3671209 510022 madalice 159068 33.0 S 00:07 php-fpm: pool madalice_com_au 3671213 510022 madalice 159052 32.8 S 00:07 php-fpm: pool madalice_com_au 3671214 510022 madalice 158988 35.0 S 00:07 php-fpm: pool madalice_com_au 509266 1 root 141456 0.0 Ss 2-06:55:09 /usr/lib/systemd/systemd-journald 3671323 3671277 infinium 118128 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3397810 1353308 cpanellogin 76908 0.0 S 01:21:01 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 3671326 3671298 corpkicks 65620 0.0 R 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 509236 509098 root 52880 0.0 Sl 2-06:55:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 46792 0.0 Sl 2-06:55:07 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42192 0.1 Ss 39-06:33:35 cpsrvd (SSL) - waiting for connections 3671321 3671296 evolution 41660 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3671322 3671297 evolution 41652 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2275833 1 root 35884 0.0 Ss 06:52:39 lfd - sleeping 3638424 938407 infinium 29492 0.0 S 10:13 php-fpm: pool user_infinium 508720 1 mailnull 25296 0.0 Ss 2-06:55:16 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1469 1 root 24000 0.1 Ss 61-23:05:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3670256 506832 nobody 23708 0.2 S 02:12 /usr/sbin/httpd -k start 510022 1 root 23336 0.0 Ss 2-06:55:05 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3654818 506832 nobody 23256 0.1 S 05:03 /usr/sbin/httpd -k start 3670244 506832 nobody 23052 0.1 S 02:13 /usr/sbin/httpd -k start 3654043 506832 nobody 23024 0.0 S 06:34 /usr/sbin/httpd -k start 483898 1 zabbix 22420 0.2 Ssl 2-06:56:26 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3670261 506832 nobody 22352 0.1 S 02:11 /usr/sbin/httpd -k start 3670829 506832 nobody 22068 0.3 S 00:53 /usr/sbin/httpd -k start 1463 1 root 21956 0.0 Ss 61-23:05:04 tailwatchd 3670251 506832 nobody 21220 0.0 S 02:12 /usr/sbin/httpd -k start 3670832 506832 nobody 21036 0.0 S 00:53 /usr/sbin/httpd -k start 3670801 506832 nobody 20952 0.0 S 00:54 /usr/sbin/httpd -k start 3671174 508720 mailnull 20940 0.0 S 00:12 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3669601 506832 nobody 20868 0.0 S 03:19 /usr/sbin/httpd -k start 3670257 506832 nobody 20736 0.0 S 02:12 /usr/sbin/httpd -k start 3671144 508720 mailnull 20732 0.0 S 00:13 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3671207 508720 mailnull 20732 0.0 S 00:08 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3671282 508720 mailnull 20732 0.0 S 00:02 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3670258 506832 nobody 20652 0.0 S 02:12 /usr/sbin/httpd -k start 3670252 506832 nobody 20624 0.0 S 02:12 /usr/sbin/httpd -k start 3670830 506832 nobody 20012 0.0 S 00:53 /usr/sbin/httpd -k start 3671277 506832 nobody 19500 0.0 S 00:02 /usr/sbin/httpd -k start 3671242 506832 nobody 19040 0.3 S 00:03 /usr/sbin/httpd -k start 3671271 506832 nobody 19040 1.0 S 00:02 /usr/sbin/httpd -k start 3671239 506832 nobody 18980 0.3 S 00:03 /usr/sbin/httpd -k start 3671240 506832 nobody 18960 0.3 S 00:03 /usr/sbin/httpd -k start 3671267 506832 nobody 18960 0.5 S 00:02 /usr/sbin/httpd -k start 3671266 506832 nobody 18952 0.5 S 00:02 /usr/sbin/httpd -k start 3671276 506832 nobody 18880 1.5 S 00:02 /usr/sbin/httpd -k start 3670831 506832 nobody 18076 0.0 S 00:53 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18068 0.0 Ss 2-05:02:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1471 1 root 16992 0.0 Ss 61-23:05:04 cPhulkd - processor 3446928 1471 root 16672 0.0 S 01:09:04 cPhulkd - dbprocessor 3671288 506832 nobody 16548 0.0 S 00:01 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4425591 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 47 evolution/portal.evolutionerp.com.au-ssl_log 34 evolution/my.evolutionerp.com.au-ssl_log 23 corpkicks/corporatekicks.com.au-ssl_log 13 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 33 203.54.180.238 23 101.182.108.127 22 49.192.139.190 12 202.153.211.134 10 118.127.40.55 4 2406:6d00:a873:6e00:c5d:663b:fbe8:6d38 3 35.231.130.18 2 114.119.159.70 2 114.119.146.16 1 34.196.51.17 1 2620:121:5043:41:fcfe:: 1 114.119.143.14 1 114.119.137.101 1 114.119.131.88 1 101.166.94.249 --- top request paths across all vhosts (last 3 min) --- 33 GET /heartbeat.php 24 GET / 8 POST /functions.php 6 POST /wp-admin/admin-ajax.php 6 POST / 4 GET /app/ajax.php 3 POST /wp-cron.php 3 POST /plugins/csvexporter/plugin.php 3 GET /wp-admin/ 3 GET /index.php 2 GET /wp-admin/load-scripts.php 2 GET /store/hand-painted-af1-drippy-kids/ 2 GET /store/custom-shoes/ 1 POST /wp-login.php 1 POST /v1/graphql 1 POST /quoteditsave.php 1 POST /opportunityeditsave.php 1 POST /graphql 1 POST /app/ajax/selectFilter.php 1 POST /app/ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 23 GET / 6 POST / 5 POST /wp-admin/admin-ajax.php 2 GET /store/hand-painted-af1-drippy-kids/ 2 GET /store/custom-shoes/ 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /store/veja-custom-swarovski-crystal-shoes/ 1 GET /store/pink-butterfly-blossom-af1-shoes/ 1 GET /store/new-balance-550-cartoon/ 1 GET /store/hand-painted-nike-af1-pink-pastel-flower/ -- last 10 requests -- 114.119.137.101 - - [30/Aug/2026:09:13:00 +1000] "GET /store/new-balance-550-cartoon/?amp%3Bimage=1&wcpr_rating=4&image=1&verified=1 HTTP/1.1" 200 54541 "https://madalice.com.au/store/new-balance-550-cartoon/?amp%3Bimage 114.119.146.16 - - [30/Aug/2026:09:13:23 +1000] "GET /store/hand-painted-nike-af1-pink-pastel-flower/?amp%3Bwcpr_rating=5&image=1&rating=1&wcpr_page=2 HTTP/1.1" 301 1 "https://madalice.com.au/store/hand-painted-nike-af1- 114.119.159.70 - - [30/Aug/2026:09:13:44 +1000] "GET /store/hand-painted-af1-drippy-kids/?rating=4&wcpr_page=2&wcpr_rating=5&wcpr_image=1 HTTP/1.1" 200 54558 "https://madalice.com.au/store/hand-painted-af1-drippy-kids/?r 114.119.146.16 - - [30/Aug/2026:09:14:06 +1000] "GET /store/hand-painted-af1-drippy-kids/?image=1&rating=1&wcpr_verified=1&wcpr_rating=4 HTTP/1.1" 200 54654 "https://madalice.com.au/store/hand-painted-af1-drippy-kids/?im 114.119.143.14 - - [30/Aug/2026:09:14:28 +1000] "GET /store/graffiti-airmax-90-custom-shoes/?image=1&verified=1&rating=3&wcpr_rating=3 HTTP/1.1" 200 53143 "https://madalice.com.au/store/graffiti-airmax-90-custom-shoes/?i 202.153.211.134 - - [30/Aug/2026:09:14:28 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 118.127.40.55 - - [30/Aug/2026:09:14:30 +1000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=53a84cddce HTTP/1.1" 200 1 "-" "WordPress/7.1; https://madalice.com.au" 35.231.130.18 - - [30/Aug/2026:09:14:47 +1000] "POST /graphql HTTP/1.1" 404 36650 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/53 35.231.130.18 - - [30/Aug/2026:09:14:49 +1000] "POST /api/graphql HTTP/1.1" 404 36653 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safar 35.231.130.18 - - [30/Aug/2026:09:14:50 +1000] "POST /v1/graphql HTTP/1.1" 404 36654 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 33 GET /heartbeat.php 1 GET / -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:09:13:53 +1000] "GET /heartbeat.php?sentAt=1788045233&bytes=106,147,103,177&_=1787918093659 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:03 +1000] "GET /heartbeat.php?sentAt=1788045244&bytes=106,147,103,188&_=1787897055175 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:03 +1000] "GET /heartbeat.php?sentAt=1788045243&bytes=106,147,103,187&_=1787918093660 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:13 +1000] "GET /heartbeat.php?sentAt=1788045254&bytes=106,147,103,198&_=1787897055176 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:13 +1000] "GET /heartbeat.php?sentAt=1788045253&bytes=106,147,103,197&_=1787918093661 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:23 +1000] "GET /heartbeat.php?sentAt=1788045264&bytes=106,147,103,208&_=1787897055177 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:23 +1000] "GET /heartbeat.php?sentAt=1788045263&bytes=106,147,103,207&_=1787918093662 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:33 +1000] "GET /heartbeat.php?sentAt=1788045274&bytes=106,147,103,218&_=1787897055178 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:33 +1000] "GET /heartbeat.php?sentAt=1788045273&bytes=106,147,103,217&_=1787918093663 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:09:14:43 +1000] "GET /heartbeat.php?sentAt=1788045284&bytes=106,147,103,228&_=1787897055179 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 8 POST /functions.php 4 GET /app/ajax.php 3 POST /plugins/csvexporter/plugin.php 3 GET /index.php 1 POST /quoteditsave.php 1 POST /opportunityeditsave.php 1 POST /app/ajax/selectFilter.php 1 POST /app/ajax.php 1 GET /plugins/fensa/fensa-ajax.php -- last 10 requests -- 101.182.108.127 - - [30/Aug/2026:09:14:39 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 101.182.108.127 - - [30/Aug/2026:09:14:40 +1000] "POST /opportunityeditsave.php?call=getTheLeads HTTP/1.1" 200 126889 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 101.182.108.127 - - [30/Aug/2026:09:14:40 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dopportunities&call=getUserSetting&caller=ajaxSubmitLocal&seq=15596780159 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 101.182.108.127 - - [30/Aug/2026:09:14:40 +1000] "POST /app/ajax.php?call=ts&tsact=tsUpdateTimesheetNominalRates HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10. 101.182.108.127 - - [30/Aug/2026:09:14:41 +1000] "POST /app/ajax/selectFilter.php?call=filterstaffandcontractors&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%201000&excludelabour=1&include=126&returnobj=ts_add_sta 101.182.108.127 - - [30/Aug/2026:09:14:42 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 101.182.108.127 - - [30/Aug/2026:09:14:46 +1000] "GET /index.php?page=opportunityedit&opportunityid=8510 HTTP/1.1" 200 116491 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; W 101.182.108.127 - - [30/Aug/2026:09:14:47 +1000] "GET /app/ajax.php?cn=tsSimpleViewCB&furi=true&uri=%2F&call=getUserSetting&caller=ajaxSubmitLocal&seq=19384145349 HTTP/1.1" 200 90 "https://my.evolutionerp.com.au/index.ph 101.182.108.127 - - [30/Aug/2026:09:14:47 +1000] "GET /app/ajax.php?cn=tsDisabledViewCB&furi=false&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=12609453251 HTTP/1.1" 200 90 "https://my.evolutionerp.com.au/index.ph 101.182.108.127 - - [30/Aug/2026:09:14:48 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8510" "Mozilla/5.0 (Windows NT 10.0; Wi --- last 30 samples (run-up to this incident) --- 2026-08-30 09:12:30 L1=1.09 run=1 blk=0 avail=7841 (56.9%) swpO=0 conn=3 myRSS=2845 php=7 phpRSS=788 ap=33 tcp=27 topuser=madalice 2026-08-30 09:12:33 L1=1.01 run=3 blk=0 avail=7853 (57.0%) swpO=0 conn=4 myRSS=2845 php=8 phpRSS=828 ap=30 tcp=26 topuser=madalice 2026-08-30 09:12:40 L1=0.93 run=1 blk=0 avail=7837 (56.9%) swpO=0 conn=3 myRSS=2845 php=7 phpRSS=833 ap=27 tcp=45 topuser=madalice 2026-08-30 09:12:43 L1=0.93 run=1 blk=0 avail=7643 (55.5%) swpO=0 conn=2 myRSS=2845 php=8 phpRSS=873 ap=55 tcp=62 topuser=madalice 2026-08-30 09:12:50 L1=1.02 run=2 blk=0 avail=7450 (54.1%) swpO=0 conn=3 myRSS=2845 php=9 phpRSS=1142 ap=49 tcp=26 topuser=madalice 2026-08-30 09:12:53 L1=1.02 run=1 blk=0 avail=7703 (55.9%) swpO=0 conn=2 myRSS=2845 php=8 phpRSS=873 ap=46 tcp=25 topuser=madalice 2026-08-30 09:13:00 L1=0.93 run=2 blk=0 avail=7897 (57.3%) swpO=0 conn=3 myRSS=2845 php=6 phpRSS=675 ap=39 tcp=26 topuser=madalice 2026-08-30 09:13:03 L1=1.02 run=3 blk=0 avail=8029 (58.3%) swpO=0 conn=2 myRSS=2845 php=7 phpRSS=594 ap=36 tcp=27 topuser=madalice 2026-08-30 09:13:10 L1=1.02 run=1 blk=0 avail=8106 (58.8%) swpO=0 conn=1 myRSS=2845 php=5 phpRSS=512 ap=29 tcp=24 topuser=madalice 2026-08-30 09:13:13 L1=0.94 run=1 blk=0 avail=8090 (58.7%) swpO=0 conn=2 myRSS=2845 php=8 phpRSS=634 ap=26 tcp=26 topuser=madalice 2026-08-30 09:13:20 L1=0.86 run=1 blk=0 avail=8166 (59.3%) swpO=0 conn=1 myRSS=2845 php=5 phpRSS=512 ap=19 tcp=26 topuser=madalice 2026-08-30 09:13:23 L1=0.79 run=2 blk=0 avail=8199 (59.5%) swpO=0 conn=2 myRSS=2845 php=6 phpRSS=464 ap=18 tcp=30 topuser=madalice 2026-08-30 09:13:30 L1=0.81 run=1 blk=0 avail=8448 (61.3%) swpO=0 conn=1 myRSS=2845 php=3 phpRSS=196 ap=18 tcp=23 topuser=madalice 2026-08-30 09:13:33 L1=0.82 run=1 blk=0 avail=8447 (61.3%) swpO=0 conn=2 myRSS=2845 php=5 phpRSS=277 ap=16 tcp=24 topuser=madalice 2026-08-30 09:13:40 L1=0.86 run=2 blk=0 avail=8458 (61.4%) swpO=0 conn=1 myRSS=2845 php=3 phpRSS=196 ap=15 tcp=32 topuser=madalice 2026-08-30 09:13:43 L1=0.86 run=1 blk=0 avail=8432 (61.2%) swpO=0 conn=3 myRSS=2845 php=5 phpRSS=276 ap=15 tcp=30 topuser=madalice 2026-08-30 09:13:50 L1=0.73 run=1 blk=0 avail=8367 (60.7%) swpO=0 conn=1 myRSS=2845 php=4 phpRSS=317 ap=15 tcp=26 topuser=madalice 2026-08-30 09:13:53 L1=0.73 run=1 blk=0 avail=8441 (61.3%) swpO=0 conn=3 myRSS=2845 php=5 phpRSS=276 ap=14 tcp=29 topuser=madalice 2026-08-30 09:14:00 L1=0.93 run=4 blk=0 avail=7866 (57.1%) swpO=0 conn=1 myRSS=2845 php=6 phpRSS=865 ap=18 tcp=37 topuser=corpkicks 2026-08-30 09:14:03 L1=0.93 run=1 blk=0 avail=8155 (59.2%) swpO=0 conn=3 myRSS=2845 php=6 phpRSS=539 ap=21 tcp=41 topuser=corpkicks 2026-08-30 09:14:11 L1=0.94 run=2 blk=0 avail=8163 (59.3%) swpO=0 conn=3 myRSS=2845 php=5 phpRSS=512 ap=21 tcp=34 topuser=corpkicks 2026-08-30 09:14:14 L1=0.94 run=3 blk=0 avail=7951 (57.7%) swpO=0 conn=3 myRSS=2845 php=7 phpRSS=779 ap=21 tcp=40 topuser=corpkicks 2026-08-30 09:14:21 L1=0.96 run=3 blk=0 avail=8015 (58.2%) swpO=0 conn=3 myRSS=2845 php=6 phpRSS=671 ap=21 tcp=35 topuser=corpkicks 2026-08-30 09:14:24 L1=0.96 run=1 blk=0 avail=8160 (59.2%) swpO=0 conn=3 myRSS=2845 php=6 phpRSS=539 ap=19 tcp=36 topuser=corpkicks 2026-08-30 09:14:31 L1=0.97 run=5 blk=0 avail=8178 (59.4%) swpO=0 conn=3 myRSS=2845 php=5 phpRSS=483 ap=18 tcp=34 topuser=madalice 2026-08-30 09:14:34 L1=0.97 run=2 blk=0 avail=7969 (57.8%) swpO=0 conn=3 myRSS=2845 php=7 phpRSS=762 ap=18 tcp=38 topuser=madalice 2026-08-30 09:14:41 L1=1.30 run=3 blk=0 avail=8073 (58.6%) swpO=0 conn=3 myRSS=2864 php=5 phpRSS=594 ap=19 tcp=33 topuser=madalice 2026-08-30 09:14:44 L1=1.30 run=3 blk=0 avail=8043 (58.4%) swpO=0 conn=4 myRSS=2864 php=7 phpRSS=682 ap=18 tcp=36 topuser=madalice 2026-08-30 09:14:51 L1=1.42 run=6 blk=0 avail=7282 (52.9%) swpO=0 conn=3 myRSS=2864 php=10 phpRSS=1432 ap=33 tcp=66 topuser=madalice 2026-08-30 09:14:54 L1=1.42 run=4 blk=0 avail=6858 (49.8%) swpO=0 conn=6 myRSS=2864 php=14 phpRSS=1631 ap=81 tcp=71 topuser=madalice