INCIDENT 2026-08-30 09:38:51 trigger: php_rss=1688MB ================================================================== load: 3.19 1.54 1.26 8/658 3756169 ncpu:10 mem_avail: 6986MB/13777MB (50.7%) swap_used:1848MB swapout:0/s blocked(D):0 running:10 iowait:0.0% steal:0.0% php: 13 procs / 1688MB heaviest user: madalice (10 procs, 1595MB) apache: 35 procs tcp_estab: 43 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2876 madalice 10 1599 root 245 1105 nobody 34 573 netdata 7 200 mailman 20 121 cpanellogin 1 78 alison 2 76 dovenull 6 46 wp-toolkit 3 31 kurri 2 26 mailnull 1 24 evolution 5 22 zabbix 1 21 dovecot 3 19 named 1 15 polkitd 1 5 nscd 1 4 cpanelconnecttrack 1 3 rpc 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 10 1604 alison 1 62 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5084 MB Active(file): 4579 MB Inactive(file): 920 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 607 MB CommitLimit: 10984 MB Committed_AS: 8609 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-07:20:12 7720 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2945776 7.5 Ssl 2-07:19:41 /usr/sbin/mariadbd 3756134 510022 madalice 203080 122 S 00:01 php-fpm: pool madalice_com_au 3756135 510022 madalice 200968 99.0 R 00:01 php-fpm: pool madalice_com_au 2328310 2277352 root 188484 0.0 S 07:00:41 spamd child 508924 1 netdata 180692 1.9 Ssl 2-07:19:10 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175580 0.0 Ss 07:15:47 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 167656 0.0 S 07:00:41 spamd child 3756094 510022 madalice 167012 55.2 R 00:07 php-fpm: pool madalice_com_au 3756098 510022 madalice 166796 48.8 R 00:06 php-fpm: pool madalice_com_au 3756097 510022 madalice 163112 38.8 R 00:07 php-fpm: pool madalice_com_au 3755959 510022 madalice 162788 24.7 R 00:27 php-fpm: pool madalice_com_au 3756095 510022 madalice 159772 50.7 R 00:07 php-fpm: pool madalice_com_au 3756096 510022 madalice 159756 52.2 R 00:07 php-fpm: pool madalice_com_au 3756089 510022 madalice 159636 54.7 R 00:08 php-fpm: pool madalice_com_au 3756093 510022 madalice 159580 45.2 R 00:08 php-fpm: pool madalice_com_au 509266 1 root 142780 0.0 Ss 2-07:19:07 /usr/lib/systemd/systemd-journald 3397810 1353308 cpanellogin 80368 0.0 S 01:44:59 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 3756136 3755945 alison 72680 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 52924 0.0 Sl 2-07:19:07 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 47052 0.0 Sl 2-07:19:05 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 3756192 3755965 tubesupplies 43460 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 42212 0.1 Ss 39-06:57:33 cpsrvd (SSL) - waiting for connections 2275833 1 root 35900 0.0 Ss 07:16:37 lfd - sleeping 508720 1 mailnull 25296 0.0 Ss 2-07:19:14 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3756125 1469 root 24560 0.0 S 00:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1469 1 root 24004 0.1 Ss 61-23:29:02 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23344 0.0 Ss 2-07:19:03 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3739887 506832 nobody 22364 0.0 S 04:53 /usr/sbin/httpd -k start 483898 1 zabbix 22196 0.2 Ssl 2-07:20:24 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1463 1 root 21956 0.0 Ss 61-23:29:02 tailwatchd 3755046 506832 nobody 20724 0.0 S 02:22 /usr/sbin/httpd -k start 3755012 506832 nobody 20400 0.0 S 02:23 /usr/sbin/httpd -k start 3754954 506832 nobody 20316 0.0 S 02:25 /usr/sbin/httpd -k start 3755017 506832 nobody 20156 0.0 S 02:22 /usr/sbin/httpd -k start 3755971 506832 nobody 20128 0.1 S 00:27 /usr/sbin/httpd -k start 3755963 506832 nobody 20032 0.0 S 00:27 /usr/sbin/httpd -k start 3754991 506832 nobody 19716 0.0 S 02:24 /usr/sbin/httpd -k start 3755040 506832 nobody 19484 0.0 S 02:22 /usr/sbin/httpd -k start 3755943 506832 nobody 19200 0.0 S 00:29 /usr/sbin/httpd -k start 3755969 506832 nobody 19064 0.0 S 00:27 /usr/sbin/httpd -k start 3755956 506832 nobody 19052 0.1 S 00:28 /usr/sbin/httpd -k start 3755975 506832 nobody 18980 0.0 S 00:27 /usr/sbin/httpd -k start 3755978 506832 nobody 18928 0.0 S 00:27 /usr/sbin/httpd -k start 3755955 506832 nobody 18816 0.0 S 00:28 /usr/sbin/httpd -k start 3755965 506832 nobody 18688 0.0 S 00:27 /usr/sbin/httpd -k start 3755949 506832 nobody 18080 0.0 S 00:28 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18068 0.0 Ss 2-05:26:44 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3755945 506832 nobody 17784 0.0 S 00:29 /usr/sbin/httpd -k start 3755976 506832 nobody 17676 0.0 S 00:27 /usr/sbin/httpd -k start 3755953 506832 nobody 17268 0.0 S 00:28 /usr/sbin/httpd -k start 3755951 506832 nobody 17228 0.0 S 00:28 /usr/sbin/httpd -k start 3755939 506832 nobody 17136 0.0 S 00:30 /usr/sbin/httpd -k start 3755952 506832 nobody 17100 0.0 S 00:28 /usr/sbin/httpd -k start 3755954 506832 nobody 17080 0.0 S 00:28 /usr/sbin/httpd -k start 1471 1 root 16996 0.0 Ss 61-23:29:02 cPhulkd - processor 3755950 506832 nobody 16976 0.0 S 00:28 /usr/sbin/httpd -k start 3446928 1471 root 16728 0.0 S 01:33:02 cPhulkd - dbprocessor 3756132 506832 nobody 16488 0.0 S 00:01 /usr/sbin/httpd -k start 3756133 506832 nobody 16488 0.0 S 00:01 /usr/sbin/httpd -k start 3756140 506832 nobody 16488 0.0 S 00:00 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4442729 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 35 evolution/portal.evolutionerp.com.au-ssl_log 26 speedlin/speedlinefencing.com.au-ssl_log 25 alison/alisonarts.com.au-ssl_log 2 customc/customcentral.com.au-ssl_log 2 nrg/nrgservices.net.au-ssl_log 1 olympic/olympicfencing.com.au-ssl_log 1 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 26 203.54.180.238 20 35.231.130.18 5 168.63.79.147 4 50.6.200.195 4 50.6.169.131 4 114.119.143.104 2 50.6.207.27 2 35.255.146.77 2 114.119.140.234 2 114.119.130.169 1 74.7.241.191 1 73.194.12.33 1 40.77.167.143 1 2a03:2880:f802:2c:: 1 216.73.216.57 --- top request paths across all vhosts (last 3 min) --- 26 GET /heartbeat.php 5 GET /store/toys-kids-custom-shoes/ 5 GET / 3 GET /wp-json/wp/v2/users 2 POST /xmlrpc.php 2 POST /api/graphql 2 GET /wp-json/ 2 GET /store/travis-af1-custom/ 2 GET /signin 2 GET /sign-in 2 GET /login 2 GET /auth 1 POST /wp-cron.php 1 POST /v1/graphql 1 POST /graphql 1 POST / 1 GET /wp-json/yoast/v1/v1/users 1 GET /wp-json/yoast/v1/users 1 GET /wp-json/wp/v2/product/31369 1 GET /wp-json/wp/v2/posts/25686 --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/toys-kids-custom-shoes/ 4 GET / 2 GET /store/travis-af1-custom/ 2 GET /signin 2 GET /sign-in 2 GET /login 2 GET /auth 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 POST / 1 GET /wp-json/wp/v2/product/31369 -- last 10 requests -- 35.231.130.18 - - [30/Aug/2026:09:38:50 +1000] "GET /signup HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:09:38:50 +1000] "GET /forgot-password HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:09:38:50 +1000] "GET /user/login HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:09:38:50 +1000] "GET /register HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:09:38:50 +1000] "GET /users/login HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:09:38:51 +1000] "GET /login HTTP/1.1" 302 1 "https://www.madalice.com.au/login" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537 35.231.130.18 - - [30/Aug/2026:09:38:50 +1000] "GET /reset-password HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.231.130.18 - - [30/Aug/2026:09:38:51 +1000] "GET /auth HTTP/1.1" 404 36640 "https://www.madalice.com.au/auth" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/5 35.231.130.18 - - [30/Aug/2026:09:38:51 +1000] "GET /sign-in HTTP/1.1" 404 36642 "https://www.madalice.com.au/sign-in" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Sa 35.231.130.18 - - [30/Aug/2026:09:38:51 +1000] "GET /signin HTTP/1.1" 404 36643 "https://www.madalice.com.au/signin" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safa == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:09:37:23 +1000] "GET /heartbeat.php?sentAt=1788046644&bytes=106,147,109,52&_=1787897055315 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:23 +1000] "GET /heartbeat.php?sentAt=1788046643&bytes=106,147,109,51&_=1787918093800 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:33 +1000] "GET /heartbeat.php?sentAt=1788046654&bytes=106,147,109,62&_=1787897055316 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:33 +1000] "GET /heartbeat.php?sentAt=1788046653&bytes=106,147,109,61&_=1787918093801 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:43 +1000] "GET /heartbeat.php?sentAt=1788046664&bytes=106,147,109,72&_=1787897055317 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:43 +1000] "GET /heartbeat.php?sentAt=1788046663&bytes=106,147,109,71&_=1787918093802 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:53 +1000] "GET /heartbeat.php?sentAt=1788046674&bytes=106,147,109,82&_=1787897055318 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:37:53 +1000] "GET /heartbeat.php?sentAt=1788046673&bytes=106,147,109,81&_=1787918093803 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:38:03 +1000] "GET /heartbeat.php?sentAt=1788046684&bytes=106,147,109,92&_=1787897055319 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:09:38:03 +1000] "GET /heartbeat.php?sentAt=1788046683&bytes=106,147,109,91&_=1787918093804 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" == speedlin/speedlinefencing.com.au-ssl_log == -- top paths -- 3 GET /wp-json/wp/v2/users 2 POST /xmlrpc.php 2 GET /wp-json/ 1 POST /api/graphql 1 GET /wp-json/yoast/v1/v1/users 1 GET /wp-json/yoast/v1/users 1 GET /wp-json/wp/v2/media 1 GET /wp-json/wp/v2/comments 1 GET /wp-json/wp-block-editor/v1/v1/users 1 GET /wp-json/wordfence/v1/members 1 GET /wp-json/wc/v3/customers 1 GET /wp-json/wc/v1/customers -- last 10 requests -- 103.133.216.219 - - [30/Aug/2026:09:37:27 +1000] "POST /xmlrpc.php HTTP/1.1" 404 9092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Win 50.6.169.131 - - [30/Aug/2026:09:37:35 +1000] "GET /wp-json/wp-block-editor/v1/v1/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.3 50.6.200.195 - - [30/Aug/2026:09:37:36 +1000] "GET /wp-json/tutor/v1/students HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla 168.63.79.147 - - [30/Aug/2026:09:37:59 +1000] "GET /wp-json/wordfence/v1/members HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Moz 112.78.134.58 - - [30/Aug/2026:09:38:11 +1000] "GET /wp-json/nps-survey/v1/v1/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, M 50.6.207.27 - - [30/Aug/2026:09:38:13 +1000] "GET /wp-json/nps-survey/v1/members HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozi 129.121.76.191 - - [30/Aug/2026:09:38:22 +1000] "GET /wp-json/akismet/v1/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozill 168.63.79.147 - - [30/Aug/2026:09:38:27 +1000] "GET /wp-json/akismet/v1/members HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozil 168.63.79.147 - - [30/Aug/2026:09:38:30 +1000] "GET /wp-json/yoast/v1/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5 143.95.209.25 - - [30/Aug/2026:09:38:35 +1000] "GET /wp-json/yoast/v1/v1/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozill --- last 30 samples (run-up to this incident) --- 2026-08-30 09:36:27 L1=0.90 run=1 blk=0 avail=8355 (60.6%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=24 tcp=48 topuser=madalice 2026-08-30 09:36:30 L1=0.90 run=4 blk=0 avail=7630 (55.4%) swpO=0 conn=1 myRSS=2876 php=7 phpRSS=622 ap=80 tcp=76 topuser=infinium 2026-08-30 09:36:37 L1=1.06 run=2 blk=0 avail=7914 (57.4%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=259 ap=74 tcp=28 topuser=madalice 2026-08-30 09:36:40 L1=1.06 run=1 blk=0 avail=7991 (58.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=71 tcp=29 topuser=madalice 2026-08-30 09:36:47 L1=1.06 run=1 blk=0 avail=8044 (58.4%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=64 tcp=28 topuser=madalice 2026-08-30 09:36:51 L1=1.06 run=1 blk=0 avail=8068 (58.6%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=61 tcp=23 topuser=madalice 2026-08-30 09:36:57 L1=0.89 run=2 blk=1 avail=8121 (58.9%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=54 tcp=23 topuser=madalice 2026-08-30 09:37:01 L1=0.89 run=3 blk=0 avail=7744 (56.2%) swpO=0 conn=1 myRSS=2876 php=6 phpRSS=694 ap=51 tcp=31 topuser=corpkicks 2026-08-30 09:37:07 L1=0.90 run=2 blk=0 avail=8128 (59.0%) swpO=0 conn=1 myRSS=2876 php=4 phpRSS=300 ap=44 tcp=23 topuser=madalice 2026-08-30 09:37:11 L1=0.90 run=1 blk=0 avail=8221 (59.7%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=41 tcp=22 topuser=madalice 2026-08-30 09:37:17 L1=0.84 run=1 blk=0 avail=8272 (60.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=192 ap=34 tcp=25 topuser=madalice 2026-08-30 09:37:21 L1=0.93 run=5 blk=0 avail=8221 (59.7%) swpO=0 conn=1 myRSS=2876 php=4 phpRSS=296 ap=31 tcp=23 topuser=madalice 2026-08-30 09:37:27 L1=0.94 run=1 blk=0 avail=8349 (60.6%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=24 tcp=24 topuser=madalice 2026-08-30 09:37:31 L1=1.02 run=2 blk=0 avail=8253 (59.9%) swpO=0 conn=1 myRSS=2876 php=4 phpRSS=340 ap=21 tcp=24 topuser=madalice 2026-08-30 09:37:37 L1=1.26 run=1 blk=0 avail=8407 (61.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=17 tcp=26 topuser=madalice 2026-08-30 09:37:41 L1=1.24 run=2 blk=0 avail=8407 (61.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=17 tcp=23 topuser=madalice 2026-08-30 09:37:47 L1=1.22 run=1 blk=0 avail=8406 (61.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=17 tcp=26 topuser=madalice 2026-08-30 09:37:51 L1=1.36 run=1 blk=0 avail=8406 (61.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=17 tcp=25 topuser=madalice 2026-08-30 09:37:57 L1=1.33 run=1 blk=0 avail=8408 (61.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=17 tcp=23 topuser=madalice 2026-08-30 09:38:01 L1=1.39 run=1 blk=0 avail=8406 (61.0%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=191 ap=17 tcp=22 topuser=madalice 2026-08-30 09:38:07 L1=1.44 run=1 blk=0 avail=8465 (61.4%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=168 ap=15 tcp=25 topuser=madalice 2026-08-30 09:38:11 L1=1.48 run=2 blk=0 avail=8439 (61.3%) swpO=0 conn=1 myRSS=2876 php=4 phpRSS=225 ap=15 tcp=25 topuser=madalice 2026-08-30 09:38:17 L1=1.52 run=1 blk=0 avail=8468 (61.5%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=168 ap=15 tcp=25 topuser=madalice 2026-08-30 09:38:21 L1=1.56 run=1 blk=0 avail=8462 (61.4%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=168 ap=16 tcp=45 topuser=madalice 2026-08-30 09:38:27 L1=1.52 run=3 blk=0 avail=8203 (59.5%) swpO=0 conn=1 myRSS=2876 php=4 phpRSS=275 ap=45 tcp=34 topuser=madalice 2026-08-30 09:38:31 L1=1.64 run=1 blk=0 avail=8303 (60.3%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=168 ap=41 tcp=19 topuser=madalice 2026-08-30 09:38:38 L1=1.75 run=1 blk=0 avail=8345 (60.6%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=168 ap=35 tcp=23 topuser=madalice 2026-08-30 09:38:41 L1=1.85 run=2 blk=0 avail=8366 (60.7%) swpO=0 conn=1 myRSS=2876 php=3 phpRSS=199 ap=31 tcp=23 topuser=madalice 2026-08-30 09:38:48 L1=2.42 run=2 blk=0 avail=7436 (54.0%) swpO=0 conn=1 myRSS=2876 php=10 phpRSS=1272 ap=28 tcp=36 topuser=madalice 2026-08-30 09:38:51 L1=3.19 run=10 blk=0 avail=6986 (50.7%) swpO=0 conn=8 myRSS=2876 php=13 phpRSS=1688 ap=35 tcp=43 topuser=madalice