INCIDENT 2026-08-30 12:19:13 trigger: php_rss=1593MB ================================================================== load: 1.11 0.91 0.81 1/665 105973 ncpu:10 mem_avail: 7000MB/13777MB (50.8%) swap_used:1825MB swapout:0/s blocked(D):0 running:1 iowait:0.0% steal:0.0% php: 12 procs / 1593MB heaviest user: madalice (10 procs, 1557MB) apache: 38 procs tcp_estab: 25 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2924 madalice 10 1557 root 246 1121 nobody 37 667 netdata 7 198 mailman 20 121 cpanellogin 1 63 alison 4 56 dovenull 6 46 mailnull 2 44 wp-toolkit 3 31 evolution 6 28 kurri 2 27 zabbix 1 21 dovecot 3 19 named 1 15 polkitd 1 5 nscd 1 4 cpanelconnecttrack 1 3 rpc 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 10 1557 evolution 2 39 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5081 MB Active(file): 4626 MB Inactive(file): 887 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 601 MB CommitLimit: 10984 MB Committed_AS: 8607 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-10:00:34 7704 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2995164 7.3 Ssl 2-10:00:03 /usr/sbin/mariadbd 2328310 2277352 root 208640 0.0 S 09:41:03 spamd child 508924 1 netdata 178452 1.9 Ssl 2-09:59:32 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175488 0.0 Ss 09:56:09 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 165788 0.0 S 09:41:03 spamd child 103550 510022 madalice 162808 13.8 S 03:26 php-fpm: pool madalice_com_au 105205 510022 madalice 161028 13.3 S 01:08 php-fpm: pool madalice_com_au 105242 510022 madalice 160140 10.7 S 01:01 php-fpm: pool madalice_com_au 105202 510022 madalice 159792 14.6 S 01:08 php-fpm: pool madalice_com_au 105198 510022 madalice 159172 14.6 S 01:08 php-fpm: pool madalice_com_au 105203 510022 madalice 158864 13.5 S 01:08 php-fpm: pool madalice_com_au 105241 510022 madalice 158600 11.0 S 01:01 php-fpm: pool madalice_com_au 105200 510022 madalice 158452 14.7 S 01:08 php-fpm: pool madalice_com_au 105209 510022 madalice 158012 12.6 S 01:05 php-fpm: pool madalice_com_au 105199 510022 madalice 158008 14.4 S 01:08 php-fpm: pool madalice_com_au 509266 1 root 147996 0.0 Ss 2-09:59:29 /usr/lib/systemd/systemd-journald 4027958 1353308 cpanellogin 65196 0.0 S 01:21:00 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 509236 509098 root 53032 0.0 Sl 2-09:59:29 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 48628 0.0 Sl 2-09:59:27 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42480 0.1 Ss 39-09:37:55 cpsrvd (SSL) - waiting for connections 105978 104829 evolution 40416 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2275833 1 root 35924 0.0 Ss 09:56:59 lfd - sleeping 508720 1 mailnull 25296 0.0 Ss 2-09:59:36 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1469 1 root 24028 0.1 Ss 62-02:09:24 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23344 0.0 Ss 2-09:59:25 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 102818 506832 nobody 22348 0.1 S 03:58 /usr/sbin/httpd -k start 1463 1 root 21968 0.0 Ss 62-02:09:24 tailwatchd 483898 1 zabbix 21800 0.2 Ssl 2-10:00:46 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 104694 506832 nobody 21064 0.0 S 01:56 /usr/sbin/httpd -k start 102844 506832 nobody 21012 0.0 S 03:57 /usr/sbin/httpd -k start 104778 506832 nobody 20912 0.0 S 01:52 /usr/sbin/httpd -k start 104818 506832 nobody 20912 0.0 S 01:50 /usr/sbin/httpd -k start 105943 508720 mailnull 20732 0.0 S 00:01 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 104741 506832 nobody 20648 0.0 S 01:53 /usr/sbin/httpd -k start 104822 506832 nobody 20592 0.0 S 01:50 /usr/sbin/httpd -k start 104740 506832 nobody 20512 0.0 S 01:53 /usr/sbin/httpd -k start 104697 506832 nobody 20468 0.0 S 01:56 /usr/sbin/httpd -k start 104769 506832 nobody 20452 0.0 S 01:52 /usr/sbin/httpd -k start 104689 506832 nobody 20356 0.0 S 01:57 /usr/sbin/httpd -k start 104813 506832 nobody 20288 0.0 S 01:51 /usr/sbin/httpd -k start 104811 506832 nobody 20076 0.0 S 01:51 /usr/sbin/httpd -k start 104775 506832 nobody 19952 0.0 S 01:52 /usr/sbin/httpd -k start 104722 506832 nobody 19764 0.0 S 01:53 /usr/sbin/httpd -k start 104748 506832 nobody 19696 0.0 S 01:53 /usr/sbin/httpd -k start 104761 506832 nobody 19664 0.0 S 01:52 /usr/sbin/httpd -k start 104829 506832 nobody 19536 0.0 S 01:50 /usr/sbin/httpd -k start 104765 506832 nobody 19500 0.0 S 01:52 /usr/sbin/httpd -k start 104746 506832 nobody 19460 0.0 S 01:53 /usr/sbin/httpd -k start 104812 506832 nobody 19416 0.0 S 01:51 /usr/sbin/httpd -k start 104782 506832 nobody 19360 0.0 S 01:52 /usr/sbin/httpd -k start 104731 506832 nobody 19240 0.0 S 01:53 /usr/sbin/httpd -k start 104776 506832 nobody 19232 0.0 S 01:52 /usr/sbin/httpd -k start 104733 506832 nobody 19120 0.0 S 01:53 /usr/sbin/httpd -k start 104715 506832 nobody 19104 0.0 S 01:54 /usr/sbin/httpd -k start 104784 506832 nobody 19100 0.0 S 01:52 /usr/sbin/httpd -k start 104809 506832 nobody 19036 0.0 S 01:51 /usr/sbin/httpd -k start 104814 506832 nobody 18996 0.0 S 01:51 /usr/sbin/httpd -k start 104770 506832 nobody 18980 0.0 S 01:52 /usr/sbin/httpd -k start 104735 506832 nobody 18940 0.0 S 01:53 /usr/sbin/httpd -k start 104828 506832 nobody 18712 0.0 S 01:50 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4501173 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min bigdeals/bigdeals.com.au-ssl_log 180 madalice/madalice.com.au-ssl_log 76 evolution/portal.evolutionerp.com.au-ssl_log 16 tubesupplies/tubesupplies.com.au-ssl_log 10 corpkicks/corporatekicks.com.au-ssl_log 3 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 180 52.139.37.240 53 35.231.130.18 16 203.54.180.238 16 123.50.132.96 6 34.175.89.173 5 118.127.40.55 2 39.194.1.116 2 114.119.159.70 2 114.119.130.40 1 66.249.68.68 1 34.196.51.17 1 114.119.143.104 --- top request paths across all vhosts (last 3 min) --- 16 GET /heartbeat.php 14 GET / 7 POST / 4 GET /wp-login.php 3 POST /wp-cron.php 2 POST /wp-admin/admin-ajax.php 2 GET /wp-admin/ 2 GET /users/login 2 GET /user/login 2 GET /store/hand-painted-nike-af1-afl-gws-goldcostsun/ 2 GET /store/hand-painted-nike-af1-afl-gws-giants/ 2 GET /signup 2 GET /signin 2 GET /sign-in 2 GET /secure 2 GET /reset-password 2 GET /register 2 GET /portal 2 GET /panel 2 GET /mar.php --- busiest 3 vhosts: top paths + last 10 requests --- == bigdeals/bigdeals.com.au-ssl_log == -- top paths -- 2 GET /mar.php 2 GET /function.php 1 GET /zwso.php 1 GET /xxx.php 1 GET /xx.php 1 GET /xpw.php 1 GET /xmlrpc.php 1 GET /wp-signup.php 1 GET /wp-seo.php 1 GET /wp.php 1 GET /wp-mail.php 1 GET /wp-login.php -- last 10 requests -- 52.139.37.240 - - [30/Aug/2026:12:18:57 +1000] "GET /erin1.PhP7 HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:18:57 +1000] "GET /home/function.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:18:58 +1000] "GET /wp-login.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:18:59 +1000] "GET /wp-content/upgrade/about.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:18:59 +1000] "GET /wp.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:19:00 +1000] "GET /.well-known/index.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:19:00 +1000] "GET /wp-admin/user/wp-login.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:19:01 +1000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3 52.139.37.240 - - [30/Aug/2026:12:19:02 +1000] "GET /wp-content/radio.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:12:19:02 +1000] "GET /wp-content/about.php HTTP/1.1" 400 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == madalice/madalice.com.au-ssl_log == -- top paths -- 11 GET / 4 POST / 3 GET /wp-login.php 2 GET /wp-admin/ 2 GET /users/login 2 GET /user/login 2 GET /store/hand-painted-nike-af1-afl-gws-goldcostsun/ 2 GET /store/hand-painted-nike-af1-afl-gws-giants/ 2 GET /signup 2 GET /signin 2 GET /sign-in 2 GET /secure -- last 10 requests -- 123.50.132.96 - - [30/Aug/2026:12:18:32 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/product-category/socks/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebK 123.50.132.96 - - [30/Aug/2026:12:18:32 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/design-your-own-shoes/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKi 123.50.132.96 - - [30/Aug/2026:12:18:33 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/product-category/customised-shoes/mens/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 lik 114.119.143.104 - - [30/Aug/2026:12:18:33 +1000] "GET /store/hand-painted-nike-af1-afl-gws-giants/?verified=1&rating=1&wcpr_rating=2&wcpr_verified=1 HTTP/1.1" 404 36670 "https://madalice.com.au/store/hand-painted-nike-af 123.50.132.96 - - [30/Aug/2026:12:18:33 +1000] "GET /?srsltid=AfmBOorEKNH0nKw66rwjFz32PW6C_1DXJ_Zz5jpE3eCzfcs2EFUQXXqD HTTP/1.1" 200 42814 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) 123.50.132.96 - - [30/Aug/2026:12:18:43 +1000] "GET /custom-new-balance-sneakers/?srsltid=AfmBOorCkd_CMI3uyx9_MAhKTX4jmt3gCrp-osnDyqlJC00nGCCfZ1S2 HTTP/1.1" 200 37987 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU i 123.50.132.96 - - [30/Aug/2026:12:18:45 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/custom-new-balance-sneakers/?srsltid=AfmBOorCkd_CMI3uyx9_MAhKTX4jmt3gCrp-osnDyqlJC00n 123.50.132.96 - - [30/Aug/2026:12:18:48 +1000] "GET /brands/newbalance/ HTTP/1.1" 301 1 "https://madalice.com.au/custom-new-balance-sneakers/?srsltid=AfmBOorCkd_CMI3uyx9_MAhKTX4jmt3gCrp-osnDyqlJC00nGCCfZ1S2" "Mozilla/5.0 123.50.132.96 - - [30/Aug/2026:12:18:49 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/design-your-own-shoes/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) Apple 123.50.132.96 - - [30/Aug/2026:12:18:51 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/custom-new-balance-sneakers/?srsltid=AfmBOorCkd_CMI3uyx9_MAhKTX4jmt3gCrp-osnDyqlJC00nGCCfZ == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 16 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:12:17:33 +1000] "GET /heartbeat.php?sentAt=1788056253&bytes=106,147,146,189&_=1787897056276 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:17:33 +1000] "GET /heartbeat.php?sentAt=1788056253&bytes=106,147,146,189&_=1787918094761 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:17:43 +1000] "GET /heartbeat.php?sentAt=1788056263&bytes=106,147,146,199&_=1787897056277 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:17:43 +1000] "GET /heartbeat.php?sentAt=1788056263&bytes=106,147,146,199&_=1787918094762 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:17:53 +1000] "GET /heartbeat.php?sentAt=1788056273&bytes=106,147,146,209&_=1787897056278 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:17:53 +1000] "GET /heartbeat.php?sentAt=1788056273&bytes=106,147,146,209&_=1787918094763 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:18:03 +1000] "GET /heartbeat.php?sentAt=1788056283&bytes=106,147,146,219&_=1787897056279 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:18:03 +1000] "GET /heartbeat.php?sentAt=1788056283&bytes=106,147,146,219&_=1787918094764 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:18:13 +1000] "GET /heartbeat.php?sentAt=1788056293&bytes=106,147,146,229&_=1787897056280 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:18:13 +1000] "GET /heartbeat.php?sentAt=1788056293&bytes=106,147,146,229&_=1787918094765 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-30 12:16:43 L1=1.12 run=4 blk=0 avail=8012 (58.2%) swpO=0 conn=2 myRSS=2925 php=6 phpRSS=575 ap=15 tcp=31 topuser=madalice 2026-08-30 12:16:52 L1=1.03 run=1 blk=0 avail=8315 (60.4%) swpO=0 conn=4 myRSS=2925 php=3 phpRSS=195 ap=15 tcp=23 topuser=madalice 2026-08-30 12:16:53 L1=0.95 run=1 blk=0 avail=8322 (60.4%) swpO=0 conn=2 myRSS=2925 php=3 phpRSS=195 ap=15 tcp=24 topuser=madalice 2026-08-30 12:17:02 L1=0.87 run=2 blk=0 avail=8270 (60.0%) swpO=0 conn=4 myRSS=2925 php=3 phpRSS=251 ap=14 tcp=24 topuser=madalice 2026-08-30 12:17:03 L1=0.88 run=1 blk=0 avail=8321 (60.4%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=194 ap=14 tcp=27 topuser=madalice 2026-08-30 12:17:12 L1=0.81 run=2 blk=0 avail=8136 (59.1%) swpO=0 conn=4 myRSS=2925 php=4 phpRSS=423 ap=14 tcp=25 topuser=corpkicks 2026-08-30 12:17:13 L1=0.75 run=2 blk=0 avail=8332 (60.5%) swpO=0 conn=1 myRSS=2925 php=4 phpRSS=223 ap=14 tcp=26 topuser=madalice 2026-08-30 12:17:22 L1=0.77 run=2 blk=0 avail=7738 (56.2%) swpO=0 conn=4 myRSS=2925 php=3 phpRSS=194 ap=109 tcp=133 topuser=madalice 2026-08-30 12:17:23 L1=0.79 run=3 blk=0 avail=7517 (54.6%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=233 ap=141 tcp=135 topuser=madalice 2026-08-30 12:17:32 L1=0.80 run=1 blk=0 avail=7561 (54.9%) swpO=0 conn=4 myRSS=2925 php=3 phpRSS=195 ap=133 tcp=21 topuser=madalice 2026-08-30 12:17:33 L1=0.82 run=2 blk=0 avail=7557 (54.9%) swpO=0 conn=1 myRSS=2925 php=4 phpRSS=235 ap=132 tcp=22 topuser=madalice 2026-08-30 12:17:42 L1=0.75 run=2 blk=0 avail=7611 (55.2%) swpO=0 conn=2 myRSS=2925 php=4 phpRSS=239 ap=123 tcp=32 topuser=madalice 2026-08-30 12:17:43 L1=0.77 run=4 blk=0 avail=7541 (54.7%) swpO=0 conn=1 myRSS=2925 php=6 phpRSS=375 ap=122 tcp=35 topuser=madalice 2026-08-30 12:17:53 L1=0.71 run=1 blk=0 avail=7678 (55.7%) swpO=0 conn=2 myRSS=2925 php=3 phpRSS=195 ap=113 tcp=37 topuser=madalice 2026-08-30 12:17:53 L1=0.65 run=2 blk=0 avail=7650 (55.5%) swpO=0 conn=1 myRSS=2925 php=5 phpRSS=289 ap=112 tcp=38 topuser=madalice 2026-08-30 12:18:03 L1=0.60 run=2 blk=0 avail=7685 (55.8%) swpO=0 conn=2 myRSS=2925 php=3 phpRSS=253 ap=103 tcp=22 topuser=madalice 2026-08-30 12:18:03 L1=0.63 run=1 blk=0 avail=7729 (56.1%) swpO=0 conn=3 myRSS=2925 php=5 phpRSS=273 ap=102 tcp=24 topuser=madalice 2026-08-30 12:18:13 L1=1.53 run=7 blk=0 avail=6883 (50.0%) swpO=0 conn=2 myRSS=2925 php=10 phpRSS=1272 ap=93 tcp=60 topuser=madalice 2026-08-30 12:18:13 L1=1.53 run=22 blk=0 avail=6315 (45.8%) swpO=0 conn=12 myRSS=2925 php=14 phpRSS=2013 ap=92 tcp=48 topuser=madalice 2026-08-30 12:18:23 L1=1.82 run=4 blk=0 avail=6544 (47.5%) swpO=27 conn=3 myRSS=2924 php=12 phpRSS=1742 ap=83 tcp=63 topuser=madalice 2026-08-30 12:18:24 L1=1.82 run=1 blk=0 avail=6567 (47.7%) swpO=24 conn=4 myRSS=2924 php=14 phpRSS=1770 ap=81 tcp=45 topuser=madalice 2026-08-30 12:18:33 L1=1.70 run=7 blk=0 avail=6679 (48.5%) swpO=0 conn=4 myRSS=2924 php=12 phpRSS=1672 ap=73 tcp=26 topuser=madalice 2026-08-30 12:18:34 L1=1.70 run=3 blk=0 avail=6647 (48.2%) swpO=0 conn=4 myRSS=2924 php=13 phpRSS=1740 ap=71 tcp=27 topuser=madalice 2026-08-30 12:18:43 L1=1.51 run=1 blk=0 avail=6584 (47.8%) swpO=0 conn=2 myRSS=2924 php=13 phpRSS=1863 ap=63 tcp=21 topuser=madalice 2026-08-30 12:18:44 L1=1.51 run=2 blk=0 avail=6539 (47.5%) swpO=0 conn=4 myRSS=2924 php=14 phpRSS=1954 ap=61 tcp=26 topuser=madalice 2026-08-30 12:18:53 L1=1.36 run=2 blk=0 avail=6895 (50.1%) swpO=0 conn=2 myRSS=2924 php=12 phpRSS=1597 ap=53 tcp=61 topuser=madalice 2026-08-30 12:18:54 L1=1.36 run=3 blk=0 avail=6886 (50.0%) swpO=0 conn=1 myRSS=2924 php=13 phpRSS=1632 ap=52 tcp=62 topuser=madalice 2026-08-30 12:19:03 L1=1.22 run=1 blk=0 avail=6921 (50.2%) swpO=0 conn=1 myRSS=2924 php=12 phpRSS=1593 ap=48 tcp=24 topuser=madalice 2026-08-30 12:19:04 L1=1.22 run=2 blk=0 avail=6853 (49.7%) swpO=0 conn=2 myRSS=2924 php=13 phpRSS=1710 ap=46 tcp=25 topuser=madalice 2026-08-30 12:19:13 L1=1.11 run=1 blk=0 avail=7000 (50.8%) swpO=0 conn=1 myRSS=2924 php=12 phpRSS=1593 ap=38 tcp=25 topuser=madalice