INCIDENT 2026-08-30 13:36:17 trigger: php_rss=1751MB ================================================================== load: 0.88 0.72 0.72 17/657 372892 ncpu:10 mem_avail: 6845MB/13777MB (49.7%) swap_used:1826MB swapout:0/s blocked(D):0 running:9 iowait:0.0% steal:0.0% php: 12 procs / 1751MB heaviest user: madalice (10 procs, 1715MB) apache: 28 procs tcp_estab: 52 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3013 madalice 10 1765 root 244 1121 nobody 27 480 netdata 7 199 mailman 20 121 mailnull 5 102 cpanellogin 1 64 dovenull 6 46 wp-toolkit 3 31 kurri 2 27 evolution 5 22 zabbix 1 20 dovecot 3 19 named 1 15 candyfabcom 1 14 alison 1 14 polkitd 1 5 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1779 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5164 MB Active(file): 4700 MB Inactive(file): 915 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 601 MB CommitLimit: 10984 MB Committed_AS: 8551 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-11:17:38 7704 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3086076 7.2 Ssl 2-11:17:07 /usr/sbin/mariadbd 372787 510022 madalice 220332 45.3 R 00:12 php-fpm: pool madalice_com_au 372791 510022 madalice 219484 40.1 R 00:11 php-fpm: pool madalice_com_au 358139 510022 madalice 219324 10.3 R 02:01 php-fpm: pool madalice_com_au 372844 510022 madalice 218364 41.0 S 00:08 php-fpm: pool madalice_com_au 372852 510022 madalice 213040 69.3 R 00:03 php-fpm: pool madalice_com_au 2328310 2277352 root 208000 0.0 S 10:58:07 spamd child 372854 510022 madalice 179880 63.0 R 00:03 php-fpm: pool madalice_com_au 508924 1 netdata 179820 1.9 Ssl 2-11:16:36 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175488 0.0 Ss 11:13:13 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 164628 0.0 S 10:58:07 spamd child 372446 510022 madalice 159744 18.3 S 00:36 php-fpm: pool madalice_com_au 372788 510022 madalice 159636 38.7 S 00:12 php-fpm: pool madalice_com_au 372789 510022 madalice 159600 29.9 S 00:12 php-fpm: pool madalice_com_au 509266 1 root 149680 0.0 Ss 2-11:16:33 /usr/lib/systemd/systemd-journald 372853 510022 madalice 129152 47.3 S 00:03 php-fpm: pool madalice_com_au 4027958 1353308 cpanellogin 65992 0.0 S 02:38:04 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 509236 509098 root 52956 0.0 Sl 2-11:16:33 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 49420 0.0 Sl 2-11:16:31 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42536 0.1 Ss 39-10:54:59 cpsrvd (SSL) - waiting for connections 372912 372624 aaa 40792 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2275833 1 root 35932 0.0 Ss 11:14:03 lfd - sleeping 508720 1 mailnull 25296 0.0 Ss 2-11:16:40 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1469 1 root 24040 0.1 Ss 62-03:26:28 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23344 0.0 Ss 2-11:16:29 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 358256 506832 nobody 22444 0.0 S 01:37 /usr/sbin/httpd -k start 356404 506832 nobody 22020 0.0 S 05:04 /usr/sbin/httpd -k start 1463 1 root 21968 0.0 Ss 62-03:26:28 tailwatchd 357694 506832 nobody 21884 0.0 S 03:00 /usr/sbin/httpd -k start 357828 506832 nobody 21572 0.0 S 02:41 /usr/sbin/httpd -k start 357766 506832 nobody 21464 0.0 S 02:50 /usr/sbin/httpd -k start 357830 506832 nobody 21268 0.0 S 02:40 /usr/sbin/httpd -k start 483898 1 zabbix 21132 0.2 Ssl 2-11:17:50 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 372846 508720 mailnull 20940 0.0 S 00:07 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 372849 508720 mailnull 20732 0.0 S 00:04 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 372425 506832 nobody 20384 0.0 S 00:38 /usr/sbin/httpd -k start 372439 506832 nobody 20220 0.0 S 00:36 /usr/sbin/httpd -k start 372441 506832 nobody 19972 0.0 S 00:36 /usr/sbin/httpd -k start 372419 506832 nobody 19656 0.0 S 00:39 /usr/sbin/httpd -k start 372424 506832 nobody 19612 0.0 S 00:38 /usr/sbin/httpd -k start 372434 506832 nobody 19420 0.0 S 00:37 /usr/sbin/httpd -k start 372435 506832 nobody 19260 0.0 S 00:37 /usr/sbin/httpd -k start 372624 506832 nobody 19176 0.0 S 00:28 /usr/sbin/httpd -k start 372628 506832 nobody 19164 0.0 S 00:27 /usr/sbin/httpd -k start 372638 506832 nobody 19016 0.0 S 00:26 /usr/sbin/httpd -k start 372626 506832 nobody 18908 0.0 S 00:27 /usr/sbin/httpd -k start 372632 506832 nobody 18748 0.0 S 00:26 /usr/sbin/httpd -k start 372754 508720 mailnull 18744 0.0 S 00:19 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 372843 508720 mailnull 18744 0.0 S 00:09 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 372445 506832 nobody 18516 0.0 S 00:36 /usr/sbin/httpd -k start 372639 506832 nobody 18252 0.0 S 00:26 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18068 0.0 Ss 2-09:24:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 372634 506832 nobody 17080 0.0 S 00:26 /usr/sbin/httpd -k start 372438 506832 nobody 17036 0.0 S 00:36 /usr/sbin/httpd -k start 1471 1 root 16968 0.0 Ss 62-03:26:28 cPhulkd - processor 3446928 1471 root 16856 0.0 S 05:30:28 cPhulkd - dbprocessor 372858 506832 nobody 16488 0.0 S 00:01 /usr/sbin/httpd -k start 372855 506832 nobody 16440 0.0 S 00:03 /usr/sbin/httpd -k start 3960981 508511 kurri 16012 0.0 S 02:56:23 dovecot/imap 509671 508992 netdata 15780 2.1 Sl 2-11:16:31 /usr/libexec/netdata/plugins.d/apps.plugin 1 --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4519529 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min kurri/kurrimotorinn.com.au-ssl_log 71 evolution/portal.evolutionerp.com.au-ssl_log 22 speedlin/speedlinefencing.com.au-ssl_log 13 aaa/aaadownunder.com.au-ssl_log 11 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 68 52.139.37.240 22 203.54.180.238 8 35.247.20.175 3 66.116.251.167 3 118.127.40.55 2 91.92.243.234 2 35.231.130.18 2 168.63.79.147 2 160.153.252.100 2 114.119.143.14 2 114.119.131.88 1 50.6.169.131 1 50.6.137.53 1 40.77.167.159 1 20.75.217.74 --- top request paths across all vhosts (last 3 min) --- 22 GET /heartbeat.php 5 GET /store/custom-rainbow-fade-monogram-shoes/ 4 GET / 3 POST /wp-cron.php 2 POST /xmlrpc.php 2 POST /wp-login.php 2 POST /graphql 2 GET /xmlrpc.php 1 POST / 1 GET /zoom1.php 1 GET /xx.php 1 GET /xda.php 1 GET /ws81.php 1 GET /ws77.php 1 GET /ws37.php 1 GET /wp-the.php 1 GET /wp-sitemap-users-1.xml 1 GET /wp-signin.php 1 GET /wp-json/wp/v2/users 1 GET /wp-json/wp/v2/comments --- busiest 3 vhosts: top paths + last 10 requests --- == kurri/kurrimotorinn.com.au-ssl_log == -- top paths -- 2 POST /xmlrpc.php 1 GET /zoom1.php 1 GET /xx.php 1 GET /xmlrpc.php 1 GET /xda.php 1 GET /ws81.php 1 GET /ws77.php 1 GET /ws37.php 1 GET /wp-the.php 1 GET /wp-signin.php 1 GET /wp-json/tutor/v1/students 1 GET /wp-includes/PHPMailer/ -- last 10 requests -- 66.116.251.167 - - [30/Aug/2026:13:34:15 +1000] "POST /xmlrpc.php HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Macin 52.139.37.240 - - [30/Aug/2026:13:34:15 +1000] "GET /Ov-Simple1.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:15 +1000] "GET /ftde.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:15 +1000] "GET /hplfuns.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:15 +1000] "GET /log.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:16 +1000] "GET /txets.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:16 +1000] "GET /wp-admin.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:16 +1000] "GET /wp-admin/images/ HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:16 +1000] "GET /wp-admin/network/ HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:13:34:16 +1000] "GET /wp-config-sample.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 22 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:13:35:13 +1000] "GET /heartbeat.php?sentAt=1788060913&bytes=106,147,164,241&_=1787897056742 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:35:13 +1000] "GET /heartbeat.php?sentAt=1788060913&bytes=106,147,164,241&_=1787918095227 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:35:23 +1000] "GET /heartbeat.php?sentAt=1788060923&bytes=106,147,164,251&_=1787897056743 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:35:23 +1000] "GET /heartbeat.php?sentAt=1788060923&bytes=106,147,164,251&_=1787918095228 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:35:33 +1000] "GET /heartbeat.php?sentAt=1788060933&bytes=106,147,165,5&_=1787897056744 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:13:35:33 +1000] "GET /heartbeat.php?sentAt=1788060933&bytes=106,147,165,5&_=1787918095229 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:13:35:43 +1000] "GET /heartbeat.php?sentAt=1788060943&bytes=106,147,165,15&_=1787897056745 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:13:35:43 +1000] "GET /heartbeat.php?sentAt=1788060943&bytes=106,147,165,15&_=1787918095230 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:13:35:53 +1000] "GET /heartbeat.php?sentAt=1788060953&bytes=106,147,165,25&_=1787897056746 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [30/Aug/2026:13:35:53 +1000] "GET /heartbeat.php?sentAt=1788060953&bytes=106,147,165,25&_=1787918095231 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" == speedlin/speedlinefencing.com.au-ssl_log == -- top paths -- 2 POST /wp-cron.php 1 POST /graphql 1 GET /wp-sitemap-users-1.xml 1 GET /wp-json/wp/v2/users 1 GET /wp-json/wp/v2/comments 1 GET /wp-json/ldlms/v2/users 1 GET /wp-json/buddypress/v1/members 1 GET /rss/ 1 GET /feed/json/ 1 GET /feed/ 1 GET /author-sitemap.xml 1 GET / -- last 10 requests -- 118.127.40.55 - - [30/Aug/2026:13:34:40 +1000] "POST /wp-cron.php?doing_wp_cron=1788060880.2478859424591064453125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://speedlinefencing.com.au" 50.6.137.53 - - [30/Aug/2026:13:34:49 +1000] "GET /wp-sitemap-users-1.xml HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 160.153.252.100 - - [30/Aug/2026:13:34:50 +1000] "GET /author-sitemap.xml HTTP/1.1" 404 8594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5 160.153.252.100 - - [30/Aug/2026:13:34:56 +1000] "POST /graphql HTTP/1.1" 404 9092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Macint 66.116.251.167 - - [30/Aug/2026:13:35:00 +1000] "GET /feed/json/ HTTP/1.1" 404 9092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Macin 50.6.169.131 - - [30/Aug/2026:13:35:01 +1000] "GET /wp-json/buddypress/v1/members?per_page=100&_fields=user_login HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr 66.116.251.167 - - [30/Aug/2026:13:35:15 +1000] "GET /?author=2 HTTP/1.1" 404 9196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (X11; L 152.53.108.193 - - [30/Aug/2026:13:35:19 +1000] "GET /wp-json/wp/v2/comments?per_page=100&_fields=author_name,author_url HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck 162.144.20.85 - - [30/Aug/2026:13:35:23 +1000] "GET /wp-json/ldlms/v2/users HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5 118.127.40.55 - - [30/Aug/2026:13:35:24 +1000] "POST /wp-cron.php?doing_wp_cron=1788060924.4419128894805908203125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://speedlinefencing.com.au" --- last 30 samples (run-up to this incident) --- 2026-08-30 13:33:56 L1=0.73 run=2 blk=0 avail=8135 (59.1%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=351 ap=18 tcp=26 topuser=madalice 2026-08-30 13:33:56 L1=0.73 run=3 blk=0 avail=8136 (59.1%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=351 ap=18 tcp=26 topuser=madalice 2026-08-30 13:34:06 L1=0.62 run=1 blk=0 avail=8126 (59.0%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=351 ap=17 tcp=26 topuser=madalice 2026-08-30 13:34:06 L1=0.62 run=3 blk=0 avail=8125 (59.0%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=351 ap=17 tcp=26 topuser=madalice 2026-08-30 13:34:16 L1=0.53 run=1 blk=0 avail=8419 (61.1%) swpO=2 conn=1 myRSS=3014 php=2 phpRSS=35 ap=16 tcp=27 topuser=root 2026-08-30 13:34:16 L1=0.53 run=3 blk=0 avail=8413 (61.1%) swpO=2 conn=1 myRSS=3014 php=2 phpRSS=35 ap=16 tcp=25 topuser=root 2026-08-30 13:34:26 L1=0.44 run=1 blk=0 avail=8331 (60.5%) swpO=1 conn=1 myRSS=3013 php=3 phpRSS=168 ap=15 tcp=19 topuser=madalice 2026-08-30 13:34:26 L1=0.44 run=3 blk=0 avail=8330 (60.5%) swpO=1 conn=1 myRSS=3013 php=3 phpRSS=168 ap=15 tcp=19 topuser=madalice 2026-08-30 13:34:36 L1=0.38 run=3 blk=0 avail=8272 (60.0%) swpO=0 conn=1 myRSS=3013 php=3 phpRSS=243 ap=13 tcp=22 topuser=madalice 2026-08-30 13:34:36 L1=0.38 run=4 blk=0 avail=8272 (60.0%) swpO=0 conn=1 myRSS=3013 php=3 phpRSS=245 ap=13 tcp=22 topuser=madalice 2026-08-30 13:34:46 L1=0.40 run=1 blk=0 avail=8207 (59.6%) swpO=2 conn=1 myRSS=3013 php=4 phpRSS=333 ap=14 tcp=21 topuser=madalice 2026-08-30 13:34:46 L1=0.40 run=2 blk=0 avail=8206 (59.6%) swpO=2 conn=1 myRSS=3013 php=4 phpRSS=333 ap=14 tcp=21 topuser=madalice 2026-08-30 13:34:56 L1=0.42 run=4 blk=0 avail=8022 (58.2%) swpO=0 conn=1 myRSS=3013 php=6 phpRSS=552 ap=15 tcp=28 topuser=infinium 2026-08-30 13:34:56 L1=0.42 run=7 blk=0 avail=8023 (58.2%) swpO=0 conn=1 myRSS=3013 php=6 phpRSS=552 ap=15 tcp=28 topuser=infinium 2026-08-30 13:35:07 L1=0.43 run=4 blk=0 avail=8246 (59.9%) swpO=0 conn=1 myRSS=3013 php=4 phpRSS=262 ap=16 tcp=20 topuser=madalice 2026-08-30 13:35:07 L1=0.43 run=7 blk=0 avail=8246 (59.9%) swpO=0 conn=2 myRSS=3013 php=4 phpRSS=261 ap=16 tcp=20 topuser=madalice 2026-08-30 13:35:17 L1=0.44 run=2 blk=0 avail=8299 (60.2%) swpO=0 conn=1 myRSS=3013 php=3 phpRSS=189 ap=14 tcp=26 topuser=madalice 2026-08-30 13:35:17 L1=0.44 run=2 blk=0 avail=8299 (60.2%) swpO=0 conn=2 myRSS=3013 php=3 phpRSS=189 ap=14 tcp=26 topuser=madalice 2026-08-30 13:35:27 L1=0.45 run=2 blk=0 avail=8299 (60.2%) swpO=0 conn=2 myRSS=3013 php=3 phpRSS=189 ap=14 tcp=26 topuser=madalice 2026-08-30 13:35:27 L1=0.45 run=3 blk=0 avail=8299 (60.2%) swpO=0 conn=1 myRSS=3013 php=3 phpRSS=189 ap=14 tcp=26 topuser=madalice 2026-08-30 13:35:37 L1=0.62 run=4 blk=0 avail=8300 (60.2%) swpO=0 conn=2 myRSS=3013 php=3 phpRSS=189 ap=15 tcp=25 topuser=madalice 2026-08-30 13:35:37 L1=0.62 run=3 blk=0 avail=8299 (60.2%) swpO=0 conn=1 myRSS=3013 php=3 phpRSS=189 ap=15 tcp=25 topuser=madalice 2026-08-30 13:35:47 L1=0.60 run=2 blk=0 avail=8110 (58.9%) swpO=1 conn=2 myRSS=3013 php=4 phpRSS=311 ap=29 tcp=36 topuser=madalice 2026-08-30 13:35:47 L1=0.60 run=2 blk=0 avail=8109 (58.9%) swpO=1 conn=1 myRSS=3013 php=4 phpRSS=311 ap=29 tcp=36 topuser=madalice 2026-08-30 13:35:57 L1=0.51 run=2 blk=0 avail=7995 (58.0%) swpO=2 conn=1 myRSS=3013 php=4 phpRSS=311 ap=42 tcp=24 topuser=madalice 2026-08-30 13:35:57 L1=0.51 run=2 blk=0 avail=7995 (58.0%) swpO=2 conn=2 myRSS=3013 php=4 phpRSS=311 ap=42 tcp=24 topuser=madalice 2026-08-30 13:36:07 L1=0.43 run=9 blk=0 avail=7248 (52.6%) swpO=2 conn=1 myRSS=3013 php=9 phpRSS=1265 ap=31 tcp=34 topuser=madalice 2026-08-30 13:36:07 L1=0.43 run=13 blk=0 avail=7248 (52.6%) swpO=2 conn=8 myRSS=3013 php=9 phpRSS=1266 ap=31 tcp=34 topuser=madalice 2026-08-30 13:36:17 L1=0.88 run=9 blk=0 avail=6845 (49.7%) swpO=0 conn=8 myRSS=3013 php=12 phpRSS=1751 ap=28 tcp=52 topuser=madalice 2026-08-30 13:36:17 L1=0.88 run=11 blk=0 avail=6773 (49.2%) swpO=0 conn=8 myRSS=3013 php=12 phpRSS=1821 ap=28 tcp=52 topuser=madalice