INCIDENT 2026-09-04 20:15:30 trigger: php_rss=1862MB ================================================================== load: 1.05 0.74 0.67 10/684 2368704 ncpu:10 mem_avail: 6291MB/13777MB (45.7%) swap_used:1541MB swapout:0/s blocked(D):0 running:10 iowait:0.0% steal:0.0% php: 11 procs / 1862MB heaviest user: madalice (9 procs, 1830MB) apache: 21 procs tcp_estab: 51 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3343 madalice 9 1922 root 252 1040 nobody 20 365 netdata 8 255 dovenull 6 68 wp-toolkit 3 61 lowrange 3 43 dovecot 3 29 mailman 20 26 cpanellogin 1 24 evolution 9 23 kurri 1 14 zabbix 1 11 infinium 1 11 mailnull 2 9 polkitd 1 7 sshd 1 6 named 1 5 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 9 1942 root 1 32 evolution 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4924 MB Active(file): 4125 MB Inactive(file): 1005 MB Dirty: 7 MB Writeback: 0 MB SReclaimable: 533 MB CommitLimit: 10984 MB Committed_AS: 8470 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2302640 root 15:29 1296 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 3-17:53:03 4188 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3423920 13.7 Ssl 2-06:01:18 /usr/sbin/mariadbd 2353232 2601907 madalice 253424 10.2 S 01:53 php-fpm: pool madalice_com_au 2368635 2601907 madalice 252832 68.5 S 00:02 php-fpm: pool madalice_com_au 2354140 2601907 madalice 247488 18.0 R 00:38 php-fpm: pool madalice_com_au 2368634 2601907 madalice 244676 71.0 S 00:02 php-fpm: pool madalice_com_au 2353237 2601907 madalice 239756 10.7 R 01:53 php-fpm: pool madalice_com_au 2368636 2601907 madalice 221340 69.0 R 00:02 php-fpm: pool madalice_com_au 1043892 2603077 root 199308 0.1 S 06:10:34 spamd child 2368638 2601907 madalice 197148 51.5 R 00:02 php-fpm: pool madalice_com_au 1542443 1 netdata 189592 2.6 Ssl 1-17:53:08 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2368650 2601907 madalice 165244 84.0 S 00:01 php-fpm: pool madalice_com_au 2353234 2601907 madalice 164328 10.6 S 01:53 php-fpm: pool madalice_com_au 2654376 2603077 root 152824 0.0 S 17:36:23 spamd child 2603077 1 root 136852 0.0 Ss 17:51:19 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 111508 0.0 Ss 7-17:55:49 /usr/lib/systemd/systemd-journald 509236 509098 root 44008 0.0 Sl 7-17:55:49 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42192 0.1 Ss 44-17:34:15 cpsrvd (SSL) - waiting for connections 1469 1 root 41864 0.1 Ss 67-10:05:44 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542981 1542551 netdata 40828 0.1 Sl 1-17:53:04 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1542487 1 wp-toolkit 34276 0.0 Ss 1-17:53:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 32964 0.0 Ss 17:52:04 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2602226 1 root 27540 0.1 Ssl 17:51:49 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 2301002 1353308 cpanellogin 25536 0.0 S 18:40 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1463 1 root 24692 0.0 Ss 67-10:05:44 tailwatchd 2352496 506832 nobody 23592 0.0 S 03:09 /usr/sbin/httpd -k start 2319140 506832 nobody 22996 0.0 S 11:42 /usr/sbin/httpd -k start 2353243 506832 nobody 22828 0.0 S 01:52 /usr/sbin/httpd -k start 2353216 506832 nobody 22364 0.0 S 01:54 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 22216 0.0 Ss 1-17:53:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2353245 506832 nobody 22152 0.0 S 01:52 /usr/sbin/httpd -k start 2353210 506832 nobody 21796 0.0 S 01:56 /usr/sbin/httpd -k start 2353252 506832 nobody 21448 0.0 S 01:52 /usr/sbin/httpd -k start 2353238 506832 nobody 21408 0.0 S 01:52 /usr/sbin/httpd -k start 2353952 506832 nobody 20976 0.0 S 00:54 /usr/sbin/httpd -k start 2353240 506832 nobody 20888 0.0 S 01:52 /usr/sbin/httpd -k start 2362776 506832 nobody 20384 0.0 S 00:21 /usr/sbin/httpd -k start 2353965 506832 nobody 20336 0.0 S 00:53 /usr/sbin/httpd -k start 2353963 506832 nobody 19532 0.0 S 00:53 /usr/sbin/httpd -k start 2363976 506832 nobody 19028 0.0 S 00:20 /usr/sbin/httpd -k start 1542982 1542551 netdata 18192 2.1 Sl 1-17:53:04 /usr/libexec/netdata/plugins.d/apps.plugin 1 2363977 506832 nobody 17764 0.0 S 00:20 /usr/sbin/httpd -k start 690513 508511 root 17288 0.0 S 07:42:40 dovecot/config 1542141 1 root 17108 0.0 Ss 1-17:53:11 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2368637 506832 nobody 16860 0.0 S 00:02 /usr/sbin/httpd -k start 2368648 506832 nobody 16828 0.0 S 00:01 /usr/sbin/httpd -k start 2368649 506832 nobody 16784 0.0 S 00:01 /usr/sbin/httpd -k start 2354084 508511 lowrange 14932 0.0 S 00:41 dovecot/imap 2354086 508511 lowrange 14848 0.0 S 00:41 dovecot/imap 1471 1 root 14728 0.0 Ss 67-10:05:44 cPhulkd - processor 2354097 508511 lowrange 14636 0.0 S 00:41 dovecot/imap 2508826 1471 root 14520 0.0 S 18:18:33 cPhulkd - dbprocessor 706620 508511 kurri 14356 0.0 S 07:40:17 dovecot/imap 690514 508511 dovecot 13956 0.0 S 07:42:40 dovecot/auth 506832 1 root 13412 0.0 Ss 7-17:56:22 /usr/sbin/httpd -k start 2368621 1471 root 13336 0.0 S 00:05 cPhulkd - processor - http socket 690509 508511 dovenull 13308 0.0 S 07:42:40 dovecot/imap-login 690505 508511 dovenull 13252 0.0 S 07:42:40 dovecot/imap-login 2352520 508511 root 12908 0.0 S 03:03 dovecot/auth -w 2352735 508511 root 12884 0.0 S 02:34 dovecot/auth -w 2368713 506832 nobody 12108 0.0 S 00:00 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10463497 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 10463489 | madalice_wp | madalice_wp | Query | 0 | init | SELECT AMuqf6qZ_posts.ID FROM AMuqf6qZ_posts INNER JOIN AMuqf6qZ_postmeta ON ( AMuqf6qZ_posts.ID = AMuqf6qZ_postmeta.post_id ) WHERE 1=1 AND ( AMuqf6qZ_postmeta.meta_key = '_elementor_conditions' ) AND AMuqf6qZ_posts.post_type = 'e-floating-buttons' AND ((AMuqf6qZ_posts.post_statu | | 10463487 | madalice_wp | madalice_wp | Query | 0 | Opening tables | SELECT option_value FROM AMuqf6qZ_options WHERE option_name = 'woocommerce_thumbnail_crop' LIMIT 1 | | 10463486 | madalice_wp | madalice_wp | Query | 0 | Creating sort index | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (8811,33647,28292,20717,30757,30681,30743,15842,15423,15904,30626,130,33108,120) ORDER BY meta_id ASC | +----------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 100 madalice/madalice.com.au-ssl_log 97 evolution/portal.evolutionerp.com.au-ssl_log 26 cosgrovecreative/cosgrovecreative.com.au-ssl_log 19 aaa/aaadownunder.com.au-ssl_log 8 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 100 40.115.94.245 58 82.197.69.56 26 203.54.180.238 19 185.104.184.228 15 141.98.11.42 11 45.141.215.111 8 118.127.40.55 5 182.43.184.15 4 114.119.130.40 1 74.7.242.53 1 34.182.65.166 1 114.119.146.16 1 114.119.131.88 --- top request paths across all vhosts (last 3 min) --- 50 GET /api/getItem/LWPB2001KG 26 GET /heartbeat.php 10 GET / 8 GET /wp-login.php 5 POST / 3 GET /wp-json/ 3 GET /wp-content/plugins/woo-custom-product-addons-pro/readme.txt 3 GET /wp-content/plugins/woocommerce-square/readme.txt 3 GET /wp-content/plugins/woocommerce/readme.txt 3 GET /wp-content/plugins/unlimited-elements-for-elementor/readme.txt 3 GET /wp-content/plugins/mage-eventpress/readme.txt 3 GET /wp-content/plugins/flexible-shipping/readme.txt 3 GET /wp-content/plugins/elementor/readme.txt 3 GET /wp-content/plugins/commercegurus-commercekit/readme.txt 3 GET /wp-content/plugins/ajax-search-for-woocommerce/readme.txt 3 GET /readme.html 3 GET /feed/ 3 GET /api/getItem/SHSG656520 2 POST /wp-cron.php 2 GET /wp-content/themes/seotheme/db.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 50 GET /api/getItem/LWPB2001KG 3 GET /api/getItem/SHSG656520 2 GET /api/getItem/SHSG656516 1 GET /api/getItem/SHSG8989508 1 GET /api/getItem/SHSG8989358 1 GET /api/getItem/SHSG8989258 1 GET /api/getItem/SHSG8989208 1 GET /api/getItem/SHSG7575508 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757540 1 GET /api/getItem/SHSG757530-8 1 GET /api/getItem/SHSG757530 -- last 10 requests -- 40.115.94.245 - - [04/Sep/2026:20:14:39 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:40 +1000] "GET /api/getItem/SHSG8989358 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:40 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:40 +1000] "GET /api/getItem/SHSG8989508 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:40 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:40 +1000] "GET /api/getItem/SHSG100100208 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:41 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:41 +1000] "GET /api/getItem/SHSG10010025 HTTP/1.1" 200 1584 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:41 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:14:41 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 8 GET /wp-login.php 5 POST / 5 GET / 3 GET /wp-json/ 3 GET /wp-content/plugins/woo-custom-product-addons-pro/readme.txt 3 GET /wp-content/plugins/woocommerce-square/readme.txt 3 GET /wp-content/plugins/woocommerce/readme.txt 3 GET /wp-content/plugins/unlimited-elements-for-elementor/readme.txt 3 GET /wp-content/plugins/mage-eventpress/readme.txt 3 GET /wp-content/plugins/flexible-shipping/readme.txt 3 GET /wp-content/plugins/elementor/readme.txt 3 GET /wp-content/plugins/commercegurus-commercekit/readme.txt -- last 10 requests -- 45.141.215.111 - - [04/Sep/2026:20:15:10 +1000] "GET /mxmoutpt.php?Fox=d3wL7 HTTP/1.1" 404 36648 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Versio 82.197.69.56 - - [04/Sep/2026:20:15:14 +1000] "GET /wp-login.php?action=register HTTP/1.1" 302 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 141.98.11.42 - - [04/Sep/2026:20:15:16 +1000] "GET /wp-admin/css/colors/ HTTP/1.1" 200 480 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 82.197.69.56 - - [04/Sep/2026:20:15:16 +1000] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 4074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 34.182.65.166 - - [04/Sep/2026:20:15:20 +1000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 118.127.40.55 - - [04/Sep/2026:20:15:19 +1000] "POST /?wordfence_syncAttackData=1788516919.3069 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://madalice.com.au" 82.197.69.56 - - [04/Sep/2026:20:15:18 +1000] "GET /wp-login.php?action=register HTTP/1.1" 302 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 82.197.69.56 - - [04/Sep/2026:20:15:22 +1000] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 4074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 141.98.11.42 - - [04/Sep/2026:20:15:26 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 349 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/5 82.197.69.56 - - [04/Sep/2026:20:15:26 +1000] "POST /wp-json/wp/v2/users HTTP/1.1" 401 94 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:20:14:27 +1000] "GET /heartbeat.php?sentAt=1788516867&bytes=106,154,154,3&_=1788436621253 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:28 +1000] "GET /heartbeat.php?sentAt=1788516868&bytes=106,154,154,4&_=1788498316686 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:37 +1000] "GET /heartbeat.php?sentAt=1788516877&bytes=106,154,154,13&_=1788436621254 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:38 +1000] "GET /heartbeat.php?sentAt=1788516878&bytes=106,154,154,14&_=1788498316687 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:47 +1000] "GET /heartbeat.php?sentAt=1788516887&bytes=106,154,154,23&_=1788436621255 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:48 +1000] "GET /heartbeat.php?sentAt=1788516888&bytes=106,154,154,24&_=1788498316688 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:57 +1000] "GET /heartbeat.php?sentAt=1788516897&bytes=106,154,154,33&_=1788436621256 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:14:58 +1000] "GET /heartbeat.php?sentAt=1788516898&bytes=106,154,154,34&_=1788498316689 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:15:07 +1000] "GET /heartbeat.php?sentAt=1788516907&bytes=106,154,154,43&_=1788436621257 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:20:15:08 +1000] "GET /heartbeat.php?sentAt=1788516908&bytes=106,154,154,44&_=1788498316690 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-04 20:13:09 L1=0.40 run=3 blk=0 avail=7309 (53.1%) swpO=0 conn=2 myRSS=3343 php=8 phpRSS=777 ap=14 tcp=25 topuser=evolution 2026-09-04 20:13:09 L1=0.40 run=4 blk=0 avail=7305 (53.0%) swpO=0 conn=3 myRSS=3343 php=8 phpRSS=781 ap=14 tcp=25 topuser=evolution 2026-09-04 20:13:19 L1=0.49 run=1 blk=0 avail=7820 (56.8%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=230 ap=15 tcp=21 topuser=madalice 2026-09-04 20:13:19 L1=0.49 run=2 blk=0 avail=7819 (56.8%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=230 ap=15 tcp=21 topuser=madalice 2026-09-04 20:13:29 L1=0.42 run=1 blk=0 avail=7820 (56.8%) swpO=0 conn=1 myRSS=3343 php=3 phpRSS=189 ap=15 tcp=20 topuser=madalice 2026-09-04 20:13:29 L1=0.42 run=4 blk=0 avail=7833 (56.9%) swpO=0 conn=2 myRSS=3343 php=3 phpRSS=189 ap=15 tcp=20 topuser=madalice 2026-09-04 20:13:39 L1=0.91 run=14 blk=0 avail=6117 (44.4%) swpO=0 conn=13 myRSS=3343 php=14 phpRSS=1983 ap=46 tcp=45 topuser=madalice 2026-09-04 20:13:39 L1=0.91 run=13 blk=0 avail=6092 (44.2%) swpO=0 conn=12 myRSS=3343 php=14 phpRSS=1984 ap=46 tcp=45 topuser=madalice 2026-09-04 20:13:49 L1=0.77 run=2 blk=0 avail=6454 (46.9%) swpO=0 conn=2 myRSS=3343 php=12 phpRSS=1607 ap=37 tcp=36 topuser=madalice 2026-09-04 20:13:50 L1=0.77 run=2 blk=0 avail=6456 (46.9%) swpO=0 conn=2 myRSS=3343 php=12 phpRSS=1611 ap=36 tcp=35 topuser=madalice 2026-09-04 20:13:59 L1=0.80 run=1 blk=0 avail=6536 (47.4%) swpO=1 conn=1 myRSS=3343 php=12 phpRSS=1608 ap=26 tcp=22 topuser=madalice 2026-09-04 20:14:00 L1=0.80 run=2 blk=0 avail=6539 (47.5%) swpO=1 conn=1 myRSS=3343 php=12 phpRSS=1608 ap=26 tcp=22 topuser=madalice 2026-09-04 20:14:09 L1=0.76 run=3 blk=0 avail=6665 (48.4%) swpO=0 conn=3 myRSS=3343 php=12 phpRSS=1533 ap=18 tcp=23 topuser=madalice 2026-09-04 20:14:10 L1=0.76 run=2 blk=0 avail=6714 (48.7%) swpO=0 conn=1 myRSS=3343 php=11 phpRSS=1455 ap=18 tcp=23 topuser=madalice 2026-09-04 20:14:19 L1=0.88 run=3 blk=0 avail=6978 (50.6%) swpO=0 conn=2 myRSS=3343 php=9 phpRSS=1141 ap=18 tcp=25 topuser=madalice 2026-09-04 20:14:20 L1=0.88 run=2 blk=0 avail=6951 (50.5%) swpO=0 conn=1 myRSS=3343 php=9 phpRSS=1169 ap=18 tcp=24 topuser=madalice 2026-09-04 20:14:29 L1=0.83 run=1 blk=0 avail=6995 (50.8%) swpO=0 conn=2 myRSS=3343 php=9 phpRSS=1136 ap=16 tcp=23 topuser=madalice 2026-09-04 20:14:30 L1=0.83 run=1 blk=0 avail=6994 (50.8%) swpO=0 conn=1 myRSS=3343 php=9 phpRSS=1136 ap=16 tcp=23 topuser=madalice 2026-09-04 20:14:39 L1=0.93 run=1 blk=0 avail=7088 (51.5%) swpO=0 conn=2 myRSS=3343 php=8 phpRSS=978 ap=23 tcp=27 topuser=madalice 2026-09-04 20:14:40 L1=0.93 run=2 blk=0 avail=7088 (51.4%) swpO=0 conn=1 myRSS=3343 php=8 phpRSS=978 ap=23 tcp=27 topuser=madalice 2026-09-04 20:14:50 L1=0.95 run=2 blk=0 avail=7408 (53.8%) swpO=0 conn=2 myRSS=3343 php=5 phpRSS=599 ap=21 tcp=34 topuser=madalice 2026-09-04 20:14:50 L1=0.95 run=2 blk=0 avail=7404 (53.7%) swpO=0 conn=1 myRSS=3343 php=5 phpRSS=599 ap=21 tcp=31 topuser=madalice 2026-09-04 20:15:00 L1=1.04 run=3 blk=0 avail=7383 (53.6%) swpO=0 conn=2 myRSS=3343 php=7 phpRSS=685 ap=20 tcp=28 topuser=madalice 2026-09-04 20:15:00 L1=1.04 run=3 blk=0 avail=7341 (53.3%) swpO=0 conn=1 myRSS=3343 php=7 phpRSS=722 ap=20 tcp=27 topuser=madalice 2026-09-04 20:15:10 L1=0.88 run=4 blk=0 avail=7184 (52.1%) swpO=0 conn=2 myRSS=3343 php=9 phpRSS=942 ap=18 tcp=37 topuser=madalice 2026-09-04 20:15:10 L1=0.88 run=10 blk=0 avail=7299 (53.0%) swpO=0 conn=1 myRSS=3343 php=8 phpRSS=801 ap=18 tcp=37 topuser=madalice 2026-09-04 20:15:20 L1=1.06 run=3 blk=0 avail=7277 (52.8%) swpO=0 conn=5 myRSS=3343 php=8 phpRSS=817 ap=20 tcp=31 topuser=madalice 2026-09-04 20:15:20 L1=1.06 run=2 blk=0 avail=7288 (52.9%) swpO=0 conn=1 myRSS=3343 php=7 phpRSS=770 ap=20 tcp=32 topuser=madalice 2026-09-04 20:15:30 L1=1.05 run=3 blk=0 avail=6677 (48.5%) swpO=0 conn=5 myRSS=3343 php=11 phpRSS=1452 ap=21 tcp=55 topuser=madalice 2026-09-04 20:15:30 L1=1.05 run=10 blk=0 avail=6291 (45.7%) swpO=0 conn=10 myRSS=3343 php=11 phpRSS=1862 ap=21 tcp=51 topuser=madalice