INCIDENT 2026-09-05 07:21:25 trigger: php_rss=1562MB ================================================================== load: 1.95 1.99 1.90 2/708 460314 ncpu:10 mem_avail: 6705MB/13777MB (48.7%) swap_used:2182MB swapout:0/s blocked(D):1 running:2 iowait:9.9% steal:0.0% php: 14 procs / 1562MB heaviest user: madalice (9 procs, 1387MB) apache: 20 procs tcp_estab: 39 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2989 root 251 1404 madalice 10 1401 nobody 19 337 netdata 8 261 evolution 11 124 infinium 5 109 dovenull 6 65 cpanellogin 1 55 wp-toolkit 3 53 kurri 3 42 lowrange 2 30 dovecot 3 27 mailman 20 26 mailnull 3 17 aaa 1 15 vinesit 1 14 corpkicks 1 14 candyfabcom 1 14 zabbix 1 9 --- php workers by user --- USER PROCS RSS_MB madalice 9 1387 evolution 3 103 infinium 1 53 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5011 MB Active(file): 3402 MB Inactive(file): 1650 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 556 MB CommitLimit: 10984 MB Committed_AS: 8851 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-04:58:58 4832 /usr/bin/imunify-agent-proxy 4109079 root 02:36:36 3616 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 02:36:36 546284 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3061204 11.8 Ssl 2-17:07:13 /usr/sbin/mariadbd 4109105 4109079 root 546284 9.5 Sl 02:36:36 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 195008 2.6 Ssl 2-04:59:03 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 168588 0.0 S 04:54:35 spamd child 408460 2601907 madalice 164216 10.6 S 12:31 php-fpm: pool madalice_com_au 424516 2601907 madalice 163936 6.9 S 09:08 php-fpm: pool madalice_com_au 407388 2601907 madalice 163872 14.2 S 14:43 php-fpm: pool madalice_com_au 407474 2601907 madalice 163696 13.8 S 14:30 php-fpm: pool madalice_com_au 424513 2601907 madalice 163308 6.3 S 09:08 php-fpm: pool madalice_com_au 424515 2601907 madalice 163136 8.1 S 09:08 php-fpm: pool madalice_com_au 424518 2601907 madalice 160836 6.9 S 09:07 php-fpm: pool madalice_com_au 424514 2601907 madalice 139636 7.0 S 09:08 php-fpm: pool madalice_com_au 424517 2601907 madalice 138148 7.3 S 09:07 php-fpm: pool madalice_com_au 3626973 1 root 131488 0.0 Ss 04:58:10 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 93432 0.0 S 04:54:35 spamd child 460285 443490 infinium 67980 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509236 509098 root 61236 0.0 Sl 8-05:01:44 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 203496 1353308 cpanellogin 56864 0.0 S 01:14:13 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 3127357 3127312 evolution 54740 0.0 Ss 07:21:24 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51520 0.0 Ss 07:21:24 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 43756 0.0 Ss 8-05:01:44 /usr/lib/systemd/systemd-journald 1542981 1542551 netdata 41144 0.1 Sl 2-04:58:59 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 40536 0.1 Ss 45-04:40:10 cpsrvd (SSL) - waiting for connections 1469 1 root 34804 0.1 Ss 67-21:11:39 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29348 0.0 Ss 2-04:59:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28692 0.0 Ss 1-04:57:59 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 28032 0.0 Ss 04:59:10 lfd - sleeping 1463 1 root 24188 0.0 Ss 67-21:11:39 tailwatchd 442461 506832 nobody 23764 0.0 S 04:40 /usr/sbin/httpd -k start 442425 506832 nobody 22880 0.0 S 04:41 /usr/sbin/httpd -k start 442270 506832 nobody 22516 0.1 S 04:46 /usr/sbin/httpd -k start 443490 506832 nobody 22088 0.1 S 02:40 /usr/sbin/httpd -k start 444182 506832 nobody 21780 0.0 S 02:14 /usr/sbin/httpd -k start 443322 506832 nobody 21524 0.0 S 02:58 /usr/sbin/httpd -k start 459488 506832 nobody 20900 0.0 S 00:55 /usr/sbin/httpd -k start 443418 506832 nobody 20516 0.0 S 02:47 /usr/sbin/httpd -k start 458898 506832 nobody 19396 0.0 S 01:13 /usr/sbin/httpd -k start 2602226 1 root 19364 0.1 Ssl 1-04:57:44 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1542531 1 wp-toolkit 19264 0.0 Ss 2-04:59:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 459978 506832 nobody 18896 0.0 S 00:25 /usr/sbin/httpd -k start 1542982 1542551 netdata 18548 2.2 Sl 2-04:58:59 /usr/libexec/netdata/plugins.d/apps.plugin 1 460133 506832 nobody 18532 0.1 S 00:13 /usr/sbin/httpd -k start 460134 506832 nobody 18528 0.0 S 00:13 /usr/sbin/httpd -k start 459969 506832 nobody 18436 0.0 S 00:26 /usr/sbin/httpd -k start 460116 506832 nobody 18400 0.0 S 00:15 /usr/sbin/httpd -k start 460122 506832 nobody 18188 0.0 S 00:14 /usr/sbin/httpd -k start 460135 506832 nobody 17212 0.0 S 00:13 /usr/sbin/httpd -k start 306499 1471 root 16400 0.0 S 42:21 cPhulkd - dbprocessor 460123 506832 nobody 16320 0.0 S 00:14 /usr/sbin/httpd -k start 424143 508511 aaa 16172 0.0 S 09:56 dovecot/imap 4020744 508511 lowrange 15684 0.0 S 03:05:46 dovecot/imap 1542141 1 root 15420 0.0 Ss 2-04:59:06 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15372 0.0 S 05:25:17 dovecot/imap 4124271 508511 kurri 15320 0.0 S 02:34:44 dovecot/imap 441374 1471 root 14960 0.0 S 05:46 cPhulkd - processor - http socket 1471 1 root 14900 0.0 Ss 67-21:11:39 cPhulkd - processor 443413 508511 infinium 14828 0.0 S 02:48 dovecot/imap 373493 508511 infinium 14744 0.0 S 24:25 dovecot/imap 460236 508511 madalice 14708 0.0 S 00:05 dovecot/imap 460238 508511 corpkicks 14688 0.0 S 00:05 dovecot/imap --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10741657 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 133 evolution/app.evolutionerp.com.au-ssl_log 124 bigdeals/bigdeals.com.au-ssl_log 108 customc/customcentral.com.au-ssl_log 8 evolution/my.evolutionerp.com.au-ssl_log 7 evolution/portal.evolutionerp.com.au-ssl_log 7 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 124 40.115.94.245 124 139.28.219.70 108 13.203.219.17 8 88.187.63.164 7 203.54.180.238 4 52.167.144.233 3 85.206.128.219 2 114.119.140.234 1 54.157.112.104 1 40.77.167.25 1 207.46.13.83 1 114.119.159.70 1 114.119.137.101 1 114.119.131.88 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 7 GET /heartbeat.php 4 GET /index.php 3 GET /store/leopard-print-custom-kids-kicks/ 3 GET /store/lakers-custom-af1-shoes/ 2 GET /tag/business/ 2 GET /shop/ 2 GET /author/customc/ 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/RHSG7550408 2 GET /api/getItem/RHSG15050308 2 GET /api/getItem/RHSG15050208 2 GET /api/getItem/RHSG150100408 2 GET /api/getItem/RHSG12575408 2 GET /api/getItem/RHSG12575308 2 GET /api/getItem/RHSG1257530 2 GET /api/getItem/RHSG10050208 2 GET /api/getItem/19R-8000 2 GET /api/getItem/19R-7320 2 GET / --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/leopard-print-custom-kids-kicks/ 3 GET /store/lakers-custom-af1-shoes/ 1 POST / 1 GET /wp-includes/widgets/wp-includes/ 1 GET /wp-includes/widgets//wp-includes/ 1 GET /wp-includes/widgets/class-wp-widget-text.php 1 GET /wp-includes/widgets/class-wp-widget-tag-cloud.php 1 GET /wp-includes/widgets/class-wp-widget-search.php 1 GET /wp-includes/widgets/class-wp-widget-rss.php 1 GET /wp-includes/widgets/class-wp-widget-recent-posts.php 1 GET /wp-includes/widgets/class-wp-widget-recent-comments.php 1 GET /wp-includes/widgets/class-wp-widget-pages.php -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:21:08 +1000] "GET /wp-includes/Requests/src//wp-includes/Requests/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:21:10 +1000] "GET /wp-includes/Requests/src/wp-includes/Requests/ HTTP/1.1" 404 36653 "-" "-" 85.206.128.219 - - [05/Sep/2026:07:21:11 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/tag/high/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) H 139.28.219.70 - - [05/Sep/2026:07:21:11 +1000] "GET /wp-includes/Requests/src/Auth//wp-includes/Requests/src/ HTTP/1.1" 301 1 "-" "-" 85.206.128.219 - - [05/Sep/2026:07:21:12 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/tag/high/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Headle 139.28.219.70 - - [05/Sep/2026:07:21:13 +1000] "GET /wp-includes/Requests/src/Auth/wp-includes/Requests/src/ HTTP/1.1" 404 36654 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:21:14 +1000] "GET /wp-includes/Requests/src/Auth/Basic.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:21:15 +1000] "GET /wp-includes/Requests/src/Cookie//wp-includes/Requests/src/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:21:16 +1000] "GET /wp-includes/Requests/src/Cookie/wp-includes/Requests/src/ HTTP/1.1" 404 36654 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:21:18 +1000] "GET /wp-includes/Requests/src/Exception//wp-includes/Requests/src/ HTTP/1.1" 301 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/RHSG7550408 2 GET /api/getItem/RHSG15050308 2 GET /api/getItem/RHSG15050208 2 GET /api/getItem/RHSG150100408 2 GET /api/getItem/RHSG12575408 2 GET /api/getItem/RHSG12575308 2 GET /api/getItem/RHSG1257530 2 GET /api/getItem/RHSG10050208 2 GET /api/getItem/19R-8000 2 GET /api/getItem/19R-7320 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:21:08 +1000] "GET /api/getItem/RHSG12575408 HTTP/1.1" 200 1350 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:09 +1000] "GET /api/getItem/RHSG1501004012 HTTP/1.1" 200 1469 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:09 +1000] "GET /api/getItem/RHSG150100408 HTTP/1.1" 200 1343 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:09 +1000] "GET /api/getItem/RHSG15050208 HTTP/1.1" 200 2045 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:10 +1000] "GET /api/getItem/RHSG15050308 HTTP/1.1" 200 1343 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:10 +1000] "GET /api/getItem/RHSG382516-8 HTTP/1.1" 200 1799 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:11 +1000] "GET /api/getItem/RHSG382516-DP16-8 HTTP/1.1" 200 1406 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:11 +1000] "GET /api/getItem/RHSG382516-DP19-8 HTTP/1.1" 200 1552 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:11 +1000] "GET /api/getItem/RHSG382516-SP16-8 HTTP/1.1" 200 1418 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:21:12 +1000] "GET /api/getItem/RHSG382516-SP19-8 HTTP/1.1" 200 1552 "-" "RestSharp/106.13.0.0" == bigdeals/bigdeals.com.au-ssl_log == -- top paths -- 1 GET /www/phpinfo.php 1 GET /wp-admin/phpinfo.php 1 GET /worker/.env 1 GET /webroot/index.php/_environment 1 GET /webmail/phpinfo.php 1 GET /uat/phpinfo.php 1 GET /uat/.env 1 GET /travis/.env 1 GET /transactional/.env 1 GET /tmp/phpinfo.php 1 GET /test/phpinfo.php 1 GET /test.php -- last 10 requests -- 13.203.219.17 - - [05/Sep/2026:07:19:23 +1000] "GET /beta/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:23 +1000] "GET /uat/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:23 +1000] "GET /qa/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:23 +1000] "GET /preview/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:23 +1000] "GET /www/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:24 +1000] "GET /htdocs/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:24 +1000] "GET /public_html/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:24 +1000] "GET /site/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:24 +1000] "GET /docs/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.219.17 - - [05/Sep/2026:07:19:25 +1000] "GET /wp-admin/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:19:01 L1=2.27 run=6 blk=1 avail=6625 (48.1%) swpO=0 conn=7 myRSS=2989 php=17 phpRSS=1676 ap=24 tcp=47 topuser=madalice 2026-09-05 07:19:04 L1=2.41 run=3 blk=1 avail=7019 (50.9%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1180 ap=23 tcp=41 topuser=madalice 2026-09-05 07:19:12 L1=2.62 run=8 blk=1 avail=6019 (43.7%) swpO=0 conn=9 myRSS=2989 php=20 phpRSS=2381 ap=27 tcp=46 topuser=madalice 2026-09-05 07:19:14 L1=2.65 run=2 blk=2 avail=6778 (49.2%) swpO=0 conn=4 myRSS=2989 php=14 phpRSS=1435 ap=26 tcp=40 topuser=madalice 2026-09-05 07:19:22 L1=2.68 run=1 blk=1 avail=7027 (51.0%) swpO=0 conn=9 myRSS=2989 php=13 phpRSS=1201 ap=19 tcp=31 topuser=madalice 2026-09-05 07:19:24 L1=2.54 run=1 blk=1 avail=7131 (51.8%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1112 ap=18 tcp=34 topuser=madalice 2026-09-05 07:19:32 L1=2.50 run=1 blk=1 avail=6895 (50.0%) swpO=0 conn=9 myRSS=2989 php=13 phpRSS=1352 ap=17 tcp=32 topuser=madalice 2026-09-05 07:19:34 L1=2.38 run=5 blk=1 avail=7062 (51.3%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1175 ap=17 tcp=31 topuser=madalice 2026-09-05 07:19:42 L1=2.27 run=4 blk=1 avail=6984 (50.7%) swpO=0 conn=9 myRSS=2989 php=13 phpRSS=1277 ap=16 tcp=33 topuser=madalice 2026-09-05 07:19:44 L1=2.17 run=1 blk=1 avail=7050 (51.2%) swpO=0 conn=3 myRSS=2989 php=13 phpRSS=1207 ap=16 tcp=32 topuser=madalice 2026-09-05 07:19:52 L1=2.07 run=3 blk=1 avail=7062 (51.3%) swpO=0 conn=6 myRSS=2989 php=15 phpRSS=1273 ap=16 tcp=35 topuser=madalice 2026-09-05 07:19:54 L1=2.07 run=3 blk=1 avail=7075 (51.4%) swpO=0 conn=3 myRSS=2989 php=13 phpRSS=1198 ap=16 tcp=33 topuser=madalice 2026-09-05 07:20:02 L1=2.06 run=2 blk=1 avail=7393 (53.7%) swpO=0 conn=6 myRSS=2989 php=13 phpRSS=837 ap=16 tcp=31 topuser=madalice 2026-09-05 07:20:04 L1=2.06 run=2 blk=1 avail=7553 (54.8%) swpO=0 conn=3 myRSS=2989 php=13 phpRSS=720 ap=15 tcp=29 topuser=madalice 2026-09-05 07:20:12 L1=1.97 run=3 blk=1 avail=7079 (51.4%) swpO=0 conn=6 myRSS=2989 php=13 phpRSS=1204 ap=15 tcp=35 topuser=madalice 2026-09-05 07:20:14 L1=1.89 run=2 blk=1 avail=7062 (51.3%) swpO=0 conn=3 myRSS=2989 php=13 phpRSS=1218 ap=15 tcp=34 topuser=madalice 2026-09-05 07:20:22 L1=1.90 run=3 blk=1 avail=6748 (49.0%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1532 ap=15 tcp=33 topuser=madalice 2026-09-05 07:20:24 L1=1.91 run=1 blk=1 avail=6749 (49.0%) swpO=0 conn=3 myRSS=2989 php=13 phpRSS=1527 ap=15 tcp=31 topuser=madalice 2026-09-05 07:20:33 L1=1.84 run=4 blk=1 avail=6626 (48.1%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1631 ap=16 tcp=33 topuser=madalice 2026-09-05 07:20:34 L1=1.93 run=4 blk=1 avail=6552 (47.6%) swpO=0 conn=5 myRSS=2989 php=14 phpRSS=1748 ap=16 tcp=31 topuser=madalice 2026-09-05 07:20:43 L1=1.85 run=3 blk=1 avail=6660 (48.3%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1608 ap=16 tcp=31 topuser=madalice 2026-09-05 07:20:44 L1=1.87 run=2 blk=1 avail=6687 (48.5%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1580 ap=16 tcp=32 topuser=madalice 2026-09-05 07:20:53 L1=1.88 run=2 blk=1 avail=6695 (48.6%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1569 ap=16 tcp=34 topuser=madalice 2026-09-05 07:20:55 L1=1.81 run=2 blk=1 avail=6694 (48.6%) swpO=0 conn=4 myRSS=2989 php=13 phpRSS=1572 ap=16 tcp=34 topuser=madalice 2026-09-05 07:21:03 L1=1.82 run=5 blk=1 avail=6652 (48.3%) swpO=0 conn=3 myRSS=2989 php=13 phpRSS=1566 ap=23 tcp=40 topuser=madalice 2026-09-05 07:21:05 L1=1.84 run=1 blk=1 avail=6666 (48.4%) swpO=0 conn=3 myRSS=2989 php=14 phpRSS=1578 ap=22 tcp=39 topuser=madalice 2026-09-05 07:21:13 L1=1.93 run=4 blk=1 avail=6564 (47.6%) swpO=0 conn=5 myRSS=2989 php=13 phpRSS=1612 ap=28 tcp=49 topuser=madalice 2026-09-05 07:21:15 L1=1.94 run=1 blk=1 avail=6611 (48.0%) swpO=0 conn=4 myRSS=2989 php=14 phpRSS=1601 ap=28 tcp=44 topuser=madalice 2026-09-05 07:21:23 L1=1.94 run=2 blk=1 avail=6737 (48.9%) swpO=0 conn=5 myRSS=2989 php=13 phpRSS=1499 ap=21 tcp=41 topuser=madalice 2026-09-05 07:21:25 L1=1.95 run=2 blk=1 avail=6705 (48.7%) swpO=0 conn=3 myRSS=2989 php=14 phpRSS=1562 ap=20 tcp=39 topuser=madalice