INCIDENT 2026-09-05 14:17:04 trigger: php_rss=1620MB ================================================================== load: 2.10 1.83 1.70 5/828 1884328 ncpu:10 mem_avail: 7193MB/13777MB (52.2%) swap_used:3725MB swapout:633/s blocked(D):1 running:6 iowait:8.7% steal:0.0% php: 15 procs / 1620MB heaviest user: madalice (9 procs, 1246MB) apache: 140 procs tcp_estab: 92 --- RSS by user (all processes) --- USER PROCS RSS_MB nobody 138 2122 mysql 1 2073 madalice 9 1254 root 257 1009 netdata 8 263 corpkicks 2 188 evolution 11 80 dovenull 6 64 tubesupplies 1 55 wp-toolkit 3 52 cpanellogin 1 48 mailnull 5 29 lowrange 2 28 dovecot 3 27 mailman 20 25 aaa 1 15 vinesit 1 14 infinium 1 14 alison 1 14 kurri 1 13 --- php workers by user --- USER PROCS RSS_MB nobody 138 2122 mysql 1 2073 madalice 9 1254 root 257 1009 netdata 8 263 corpkicks 2 194 evolution 11 80 dovenull 6 64 tubesupplies 1 55 wp-toolkit 3 52 cpanellogin 1 48 mailnull 5 29 lowrange 2 28 dovecot 3 27 mailman 20 25 aaa 1 15 vinesit 1 14 infinium 1 14 alison 1 14 kurri 1 13 --- php workers by user --- USER PROCS RSS_MB madalice 9 1257 evolution 4 86 tubesupplies 1 57 corpkicks 1 41 root 1 27 --- vm tuning / memory pressure --- madalice 9 1259 evolution 4 91 tubesupplies 1 58 root 1 27 vm.swappiness 30 --- vm tuning / memory pressure --- vm.vfs_cache_pressure 100 vm.swappiness 30 vm.min_free_kbytes 67584 vm.vfs_cache_pressure 100 vm.overcommit_memory 0 vm.min_free_kbytes 67584 vm.overcommit_ratio 50 Cached: 6099 MB Active(file): 4959 MB Inactive(file): 1216 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 455 MB CommitLimit: 10984 MB Committed_AS: 11301 MB --- backup / dump / scan processes (page-cache evictors) --- vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6101 MB Active(file): 4959 MB Inactive(file): 1216 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 455 MB CommitLimit: 10984 MB Committed_AS: 11301 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1817551 root 17:03 3084 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 4-11:54:38 3884 /usr/bin/imunify-agent-proxy 4109079 root 09:32:16 3476 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 09:32:16 217028 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID USER ELAPSED RSS_KB COMMAND 1817551 root 17:03 3084 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 4-11:54:38 3884 /usr/bin/imunify-agent-proxy 4109079 root 09:32:16 3476 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 09:32:16 217028 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2122840 11.0 Rsl 3-00:02:53 /usr/sbin/mariadbd 4109105 4109079 root 217028 3.8 Sl 09:32:16 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1883932 2601907 madalice 205584 20.3 R 00:28 php-fpm: pool madalice_com_au 1542443 1 netdata 197816 2.5 Ssl 2-11:54:43 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 167784 0.0 S 11:50:15 spamd child 1884008 2601907 madalice 159864 27.2 S 00:13 php-fpm: pool madalice_com_au 1884241 2601907 madalice 137184 37.5 S 00:04 php-fpm: pool madalice_com_au 1884207 2601907 madalice 137148 35.5 S 00:04 php-fpm: pool madalice_com_au 1884210 2601907 madalice 137112 37.7 S 00:04 php-fpm: pool madalice_com_au 1884211 2601907 madalice 137112 36.0 S 00:04 php-fpm: pool madalice_com_au 1884212 2601907 madalice 137108 36.7 S 00:04 php-fpm: pool madalice_com_au 1884246 2601907 madalice 126008 35.0 S 00:04 php-fpm: pool madalice_com_au 1884240 2601907 madalice 125204 32.5 S 00:04 php-fpm: pool madalice_com_au 3626973 1 root 82776 0.0 Ss 11:53:50 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 81824 0.0 S 11:50:15 spamd child 1884270 1883920 tubesupplies 64936 30.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509266 1 root 54056 0.0 Ss 8-11:57:24 /usr/lib/systemd/systemd-journald 1765993 1353308 cpanellogin 50064 0.0 S 33:44 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1353308 1 root 42436 0.1 Ss 45-11:35:50 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41192 0.1 Sl 2-11:54:39 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1884384 1884182 evolution 40068 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 39560 0.0 Sl 8-11:57:24 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 38360 0.1 Ss 68-04:07:19 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3127357 3127312 evolution 31632 0.0 Ss 14:17:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 31324 0.0 Ss 14:17:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 1542487 1 wp-toolkit 28844 0.0 Ss 2-11:54:43 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28148 0.0 Ss 1-11:53:39 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1849865 506832 nobody 22412 0.0 S 10:30 /usr/sbin/httpd -k start 1832468 506832 nobody 21924 0.1 S 15:39 /usr/sbin/httpd -k start 1849863 506832 nobody 21792 0.0 S 10:30 /usr/sbin/httpd -k start 1867682 506832 nobody 21148 0.0 S 04:10 /usr/sbin/httpd -k start 1851482 506832 nobody 20596 0.0 S 07:53 /usr/sbin/httpd -k start 1868575 506832 nobody 19304 0.1 S 02:33 /usr/sbin/httpd -k start 1884097 506832 nobody 19148 0.1 S 00:08 /usr/sbin/httpd -k start 1869830 506832 nobody 19136 0.0 S 02:02 /usr/sbin/httpd -k start 1884075 506832 nobody 18996 0.0 S 00:09 /usr/sbin/httpd -k start 1463 1 root 18960 0.0 Ss 68-04:07:19 tailwatchd 1871350 506832 nobody 18944 0.0 S 02:01 /usr/sbin/httpd -k start 1542982 1542551 netdata 18888 2.2 Sl 2-11:54:39 /usr/libexec/netdata/plugins.d/apps.plugin 1 1542531 1 wp-toolkit 18868 0.0 Ss 2-11:54:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1883920 506832 nobody 18852 0.0 S 00:31 /usr/sbin/httpd -k start 1868949 506832 nobody 18848 0.0 S 02:03 /usr/sbin/httpd -k start 1884070 506832 nobody 18556 0.1 S 00:10 /usr/sbin/httpd -k start 1872881 506832 nobody 18416 0.0 S 02:00 /usr/sbin/httpd -k start 1884179 506832 nobody 18412 0.2 S 00:05 /usr/sbin/httpd -k start 1884176 506832 nobody 18388 0.2 S 00:05 /usr/sbin/httpd -k start 1884177 506832 nobody 18388 0.2 S 00:05 /usr/sbin/httpd -k start 1884178 506832 nobody 18352 0.2 S 00:05 /usr/sbin/httpd -k start 1884180 506832 nobody 18352 0.4 S 00:05 /usr/sbin/httpd -k start 1884175 506832 nobody 18324 0.4 S 00:05 /usr/sbin/httpd -k start 1883876 506832 nobody 18244 0.0 S 00:32 /usr/sbin/httpd -k start 1884095 506832 nobody 18216 0.0 S 00:08 /usr/sbin/httpd -k start 1884092 506832 nobody 18176 0.1 S 00:08 /usr/sbin/httpd -k start 1884187 506832 nobody 18176 0.0 S 00:05 /usr/sbin/httpd -k start 1884096 506832 nobody 18132 0.1 S 00:08 /usr/sbin/httpd -k start 1884163 506832 nobody 17804 0.0 S 00:06 /usr/sbin/httpd -k start 1884079 506832 nobody 17064 0.0 S 00:09 /usr/sbin/httpd -k start 1884082 506832 nobody 17056 0.1 S 00:09 /usr/sbin/httpd -k start 1884183 506832 nobody 16956 0.0 S 00:05 /usr/sbin/httpd -k start 1884016 506832 nobody 16620 0.0 S 00:11 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2122840 11.0 Ssl 3-00:02:53 /usr/sbin/mariadbd 4109105 4109079 root 217028 3.8 Sl 09:32:16 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1883932 2601907 madalice 207432 20.4 R 00:28 php-fpm: pool madalice_com_au 1542443 1 netdata 197816 2.5 Ssl 2-11:54:43 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 167784 0.0 S 11:50:15 spamd child 1884008 2601907 madalice 159864 27.2 S 00:13 php-fpm: pool madalice_com_au 1884241 2601907 madalice 137184 37.5 S 00:04 php-fpm: pool madalice_com_au 1884207 2601907 madalice 137148 35.5 S 00:04 php-fpm: pool madalice_com_au 1884210 2601907 madalice 137112 37.7 S 00:04 php-fpm: pool madalice_com_au 1884211 2601907 madalice 137112 36.0 S 00:04 php-fpm: pool madalice_com_au 1884212 2601907 madalice 137108 36.7 S 00:04 php-fpm: pool madalice_com_au 1884246 2601907 madalice 126008 35.0 S 00:04 php-fpm: pool madalice_com_au 1884240 2601907 madalice 125204 32.5 S 00:04 php-fpm: pool madalice_com_au 3626973 1 root 82776 0.0 Ss 11:53:50 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 81824 0.0 S 11:50:15 spamd child 1884270 1883920 tubesupplies 65728 31.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509266 1 root 54056 0.0 Ss 8-11:57:24 /usr/lib/systemd/systemd-journald 1765993 1353308 cpanellogin 50064 0.0 S 33:44 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1353308 1 root 42436 0.1 Ss 45-11:35:50 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41192 0.1 Sl 2-11:54:39 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1884384 1884182 evolution 40752 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 39560 0.0 Sl 8-11:57:24 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 38360 0.1 Ss 68-04:07:19 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3127357 3127312 evolution 31632 0.0 Ss 14:17:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 31324 0.0 Ss 14:17:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 1542487 1 wp-toolkit 28844 0.0 Ss 2-11:54:43 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28148 0.0 Ss 1-11:53:39 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1849865 506832 nobody 22412 0.0 S 10:30 /usr/sbin/httpd -k start 1832468 506832 nobody 21924 0.1 S 15:39 /usr/sbin/httpd -k start 1849863 506832 nobody 21792 0.0 S 10:30 /usr/sbin/httpd -k start 1867682 506832 nobody 21148 0.0 S 04:10 /usr/sbin/httpd -k start 1851482 506832 nobody 20596 0.0 S 07:53 /usr/sbin/httpd -k start 1868575 506832 nobody 19304 0.1 S 02:33 /usr/sbin/httpd -k start 1884097 506832 nobody 19148 0.1 S 00:08 /usr/sbin/httpd -k start 1869830 506832 nobody 19136 0.0 S 02:02 /usr/sbin/httpd -k start 1884075 506832 nobody 18996 0.0 S 00:09 /usr/sbin/httpd -k start 1463 1 root 18960 0.0 Ss 68-04:07:19 tailwatchd 1871350 506832 nobody 18944 0.0 S 02:01 /usr/sbin/httpd -k start 1542982 1542551 netdata 18888 2.2 Sl 2-11:54:39 /usr/libexec/netdata/plugins.d/apps.plugin 1 1542531 1 wp-toolkit 18868 0.0 Ss 2-11:54:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1883920 506832 nobody 18852 0.0 S 00:31 /usr/sbin/httpd -k start 1868949 506832 nobody 18848 0.0 S 02:03 /usr/sbin/httpd -k start 1884070 506832 nobody 18556 0.1 S 00:10 /usr/sbin/httpd -k start 1872881 506832 nobody 18416 0.0 S 02:00 /usr/sbin/httpd -k start 1884179 506832 nobody 18412 0.2 S 00:05 /usr/sbin/httpd -k start 1884176 506832 nobody 18388 0.2 S 00:05 /usr/sbin/httpd -k start 1884177 506832 nobody 18388 0.2 S 00:05 /usr/sbin/httpd -k start 1884178 506832 nobody 18352 0.2 S 00:05 /usr/sbin/httpd -k start 1884180 506832 nobody 18352 0.4 S 00:05 /usr/sbin/httpd -k start 1884175 506832 nobody 18324 0.4 S 00:05 /usr/sbin/httpd -k start 1883876 506832 nobody 18244 0.0 S 00:32 /usr/sbin/httpd -k start 1884095 506832 nobody 18216 0.0 S 00:08 /usr/sbin/httpd -k start 1884092 506832 nobody 18176 0.1 S 00:08 /usr/sbin/httpd -k start 1884187 506832 nobody 18176 0.0 S 00:05 /usr/sbin/httpd -k start 1884096 506832 nobody 18132 0.1 S 00:08 /usr/sbin/httpd -k start 1884163 506832 nobody 17804 0.0 S 00:06 /usr/sbin/httpd -k start 1884079 506832 nobody 17064 0.0 S 00:09 /usr/sbin/httpd -k start 1884082 506832 nobody 17056 0.1 S 00:09 /usr/sbin/httpd -k start 1884183 506832 nobody 16956 0.0 S 00:05 /usr/sbin/httpd -k start 1884016 506832 nobody 16620 0.0 S 00:11 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10948335 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- mariadb processlist (non-sleeping) --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10948337 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min VHOST LOG REQ/3min customkidscom/customkids.com.au 384 customkidscom/customkids.com.au 384 evolution/app.evolutionerp.com.au-ssl_log 66 evolution/app.evolutionerp.com.au-ssl_log 66 madalice/madalice.com.au-ssl_log 11 madalice/madalice.com.au-ssl_log 11 aaa/aaadownunder.com.au-ssl_log 3 aaa/aaadownunder.com.au-ssl_log 3 nrg/nrgservices.net.au-ssl_log 1 nrg/nrgservices.net.au-ssl_log 1 olympic/olympicfencing.com.au-ssl_log 1 olympic/olympicfencing.com.au-ssl_log 1 (total vhosts taking traffic: 6) (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- --- top client IPs across all vhosts (last 3 min) --- 384 185.177.72.17 66 40.115.94.245 2 66.116.251.167 2 180.181.252.90 2 159.13.37.184 1 79.106.229.212 1 43.173.175.201 1 43.172.196.142 1 43.164.190.124 1 3.101.22.204 1 216.244.66.236 1 114.119.143.104 1 114.119.140.234 1 114.119.131.88 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 384 185.177.72.17 66 40.115.94.245 2 66.116.251.167 2 180.181.252.90 2 159.13.37.184 1 79.106.229.212 1 43.173.175.201 1 43.172.196.142 1 43.164.190.124 1 3.101.22.204 1 216.244.66.236 1 114.119.143.104 1 114.119.140.234 1 114.119.131.88 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 33 GET /api/getItem/LWFB2001KG 4 GET /store/af1-richmond9/ 4 GET / 2 POST / 2 GET /wp-login.php 2 GET /wp-json/wp/v2/users 2 GET /api/getItem/SHSG100100308 1 POST /wp-login.php 1 GET /.zsh_history 1 GET /.yarnrc 1 GET /xmlrpc.php 1 GET /wp-login 1 GET /wp-json/wp/v2/tags 1 GET /wp-json/wp/v2/settings 1 GET /wp-json/wp/v2/posts 1 GET /wp-json/wp/v2/pages 1 GET /wp-json/wp/v2/media 1 GET /wp-json/wp/v2/comments 1 GET /wp-json/wp/v2/categories 1 GET /wp-json/wp/v2 --- busiest 3 vhosts: top paths + last 10 requests --- == customkidscom/customkids.com.au == -- top paths -- 33 GET /api/getItem/LWFB2001KG 4 GET /store/af1-richmond9/ 4 GET / 2 POST / 2 GET /wp-login.php 2 GET /wp-json/wp/v2/users 2 GET /api/getItem/SHSG100100308 1 POST /wp-login.php 1 GET /.zsh_history 1 GET /.yarnrc 1 GET /xmlrpc.php 1 GET /wp-login 1 GET /wp-json/wp/v2/tags 1 GET /wp-json/wp/v2/settings 1 GET /wp-json/wp/v2/posts 1 GET /wp-json/wp/v2/pages 1 GET /wp-json/wp/v2/media 1 GET /wp-json/wp/v2/comments 1 GET /wp-json/wp/v2/categories 1 GET /wp-json/wp/v2 --- busiest 3 vhosts: top paths + last 10 requests --- == customkidscom/customkids.com.au == -- top paths -- 2 GET /wp-json/wp/v2/users 1 GET /.zsh_history 1 GET /.yarnrc 1 GET /xmlrpc.php 1 GET /wp-login.php 1 GET /wp-login 1 GET /wp-json/wp/v2/tags 1 GET /wp-json/wp/v2/settings 1 GET /wp-json/wp/v2/posts 1 GET /wp-json/wp/v2/pages 1 GET /wp-json/wp/v2/media 1 GET /wp-json/wp/v2/comments -- last 10 requests -- 185.177.72.17 - - [05/Sep/2026:14:16:52 +1000] "GET /payment/return HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:53 +1000] "GET /payment/notify HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:53 +1000] "GET /payment/status HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:53 +1000] "GET /payments HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /payments/ HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /pay HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /pay/ HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /billing HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:55 +1000] "GET /billing/ HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:55 +1000] "GET /billing/invoices HTTP/1.1" 404 - "-" "curl/8.7.1" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /wp-json/wp/v2/users 1 GET /.zsh_history 1 GET /.yarnrc 1 GET /xmlrpc.php 1 GET /wp-login.php 1 GET /wp-login 1 GET /wp-json/wp/v2/tags 1 GET /wp-json/wp/v2/settings 1 GET /wp-json/wp/v2/posts 1 GET /wp-json/wp/v2/pages 1 GET /wp-json/wp/v2/media 1 GET /wp-json/wp/v2/comments -- last 10 requests -- 185.177.72.17 - - [05/Sep/2026:14:16:52 +1000] "GET /payment/return HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:53 +1000] "GET /payment/notify HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:53 +1000] "GET /payment/status HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:53 +1000] "GET /payments HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /payments/ HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /pay HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /pay/ HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:54 +1000] "GET /billing HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:55 +1000] "GET /billing/ HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.17 - - [05/Sep/2026:14:16:55 +1000] "GET /billing/invoices HTTP/1.1" 404 - "-" "curl/8.7.1" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 33 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/SHSG100100308 1 GET /api/getItem/SHSP8989608 1 GET /api/getItem/SHSP7575608 1 GET /api/getItem/SHSP5050608 1 GET /api/getItem/SHSG8989508 1 GET /api/getItem/SHSG8989358 1 GET /api/getItem/SHSG8989258 1 GET /api/getItem/SHSG8989208 1 GET /api/getItem/SHSG7575508 1 GET /api/getItem/SHSG7575358 1 GET /api/getItem/SHSG6565608 -- last 10 requests -- 33 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/SHSG100100308 1 GET /api/getItem/SHSP8989608 1 GET /api/getItem/SHSP7575608 1 GET /api/getItem/SHSP5050608 1 GET /api/getItem/SHSG8989508 1 GET /api/getItem/SHSG8989358 1 GET /api/getItem/SHSG8989258 1 GET /api/getItem/SHSG8989208 1 GET /api/getItem/SHSG7575508 1 GET /api/getItem/SHSG7575358 1 GET /api/getItem/SHSG6565608 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/SHSG100100208 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/SHSG100100258 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:57 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/SHSG100100408 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/SHSG100100208 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/SHSG100100258 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:56 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:15:57 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/SHSG100100408 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:14:17:01 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 4 GET /store/af1-richmond9/ 3 GET / 2 POST / 1 GET /store/custom-wedding-converse/ 1 GET /shop/ -- last 10 requests -- 4 GET /store/af1-richmond9/ 3 GET / 2 POST / 1 GET /store/custom-wedding-converse/ 1 GET /shop/ -- last 10 requests -- 159.13.37.184 - - [05/Sep/2026:14:15:05 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/nike-by-you-australia/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT 114.119.131.88 - - [05/Sep/2026:14:15:08 +1000] "GET /store/af1-richmond9/?wcpr_image=1&wcpr_rating=2&wcpr_verified=1 HTTP/1.1" 200 50216 "https://madalice.com.au/store/af1-richmond9/?wcpr_image=1&wcpr_rating=2&wcpr_veri 216.244.66.236 - - [05/Sep/2026:14:15:14 +1000] "GET /shop/?add-to-cart=496 HTTP/1.1" 200 35973 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 114.119.140.234 - - [05/Sep/2026:14:15:39 +1000] "GET /store/af1-richmond9/?wcpr_image=1&rating=3&wcpr_page=4&wcpr_rating=2 HTTP/1.1" 200 50219 "https://madalice.com.au/store/af1-richmond9/?wcpr_image=1&rating=3&wcpr_pag 114.119.143.104 - - [05/Sep/2026:14:16:11 +1000] "GET /store/af1-richmond9/?verified=1&wcpr_verified=1&wcpr_rating=1&wcpr_image=1 HTTP/1.1" 200 50141 "https://madalice.com.au/store/af1-richmond9/?verified=1&wcpr_verified 114.119.130.40 - - [05/Sep/2026:14:16:36 +1000] "GET /store/af1-richmond9/?verified=1&wcpr_verified=1&wcpr_page=4&wcpr_rating=1 HTTP/1.1" 200 50220 "https://madalice.com.au/store/af1-richmond9/?verified=1&wcpr_verified=1 43.173.175.201 - - [05/Sep/2026:14:16:51 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) 180.181.252.90 - - [05/Sep/2026:14:16:51 +1000] "GET /store/custom-wedding-converse/?srsltid=AfmBOopHcNepHmMMV-i_WyKHBQwEuYeSk7soCITUjcEtrsMHY0cfh3cJ HTTP/1.1" 200 52443 "https://www.google.com/" "Mozilla/5.0 (iPhone; CP 43.172.196.142 - - [05/Sep/2026:14:16:59 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom 180.181.252.90 - - [05/Sep/2026:14:17:01 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/custom-wedding-converse/?srsltid=AfmBOopHcNepHmMMV-i_WyKHBQwEuYeSk7soCITUjcEtr 159.13.37.184 - - [05/Sep/2026:14:15:05 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/nike-by-you-australia/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT 114.119.131.88 - - [05/Sep/2026:14:15:08 +1000] "GET /store/af1-richmond9/?wcpr_image=1&wcpr_rating=2&wcpr_verified=1 HTTP/1.1" 200 50216 "https://madalice.com.au/store/af1-richmond9/?wcpr_image=1&wcpr_rating=2&wcpr_veri 216.244.66.236 - - [05/Sep/2026:14:15:14 +1000] "GET /shop/?add-to-cart=496 HTTP/1.1" 200 35973 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 114.119.140.234 - - [05/Sep/2026:14:15:39 +1000] "GET /store/af1-richmond9/?wcpr_image=1&rating=3&wcpr_page=4&wcpr_rating=2 HTTP/1.1" 200 50219 "https://madalice.com.au/store/af1-richmond9/?wcpr_image=1&rating=3&wcpr_pag 114.119.143.104 - - [05/Sep/2026:14:16:11 +1000] "GET /store/af1-richmond9/?verified=1&wcpr_verified=1&wcpr_rating=1&wcpr_image=1 HTTP/1.1" 200 50141 "https://madalice.com.au/store/af1-richmond9/?verified=1&wcpr_verified 114.119.130.40 - - [05/Sep/2026:14:16:36 +1000] "GET /store/af1-richmond9/?verified=1&wcpr_verified=1&wcpr_page=4&wcpr_rating=1 HTTP/1.1" 200 50220 "https://madalice.com.au/store/af1-richmond9/?verified=1&wcpr_verified=1 43.173.175.201 - - [05/Sep/2026:14:16:51 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) 180.181.252.90 - - [05/Sep/2026:14:16:51 +1000] "GET /store/custom-wedding-converse/?srsltid=AfmBOopHcNepHmMMV-i_WyKHBQwEuYeSk7soCITUjcEtrsMHY0cfh3cJ HTTP/1.1" 200 52443 "https://www.google.com/" "Mozilla/5.0 (iPhone; CP 43.172.196.142 - - [05/Sep/2026:14:16:59 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom 180.181.252.90 - - [05/Sep/2026:14:17:01 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/custom-wedding-converse/?srsltid=AfmBOopHcNepHmMMV-i_WyKHBQwEuYeSk7soCITUjcEtr --- last 30 samples (run-up to this incident) --- --- last 30 samples (run-up to this incident) --- 2026-09-05 14:14:43 L1=1.37 run=2 blk=1 avail=9125 (66.2%) swpO=0 conn=1 myRSS=2101 php=6 phpRSS=279 ap=17 tcp=29 topuser=madalice 2026-09-05 14:14:43 L1=1.37 run=3 blk=1 avail=9119 (66.2%) swpO=0 conn=3 myRSS=2101 php=6 phpRSS=275 ap=17 tcp=29 topuser=madalice 2026-09-05 14:14:53 L1=1.31 run=1 blk=1 avail=9146 (66.4%) swpO=0 conn=1 myRSS=2101 php=5 phpRSS=244 ap=17 tcp=27 topuser=madalice 2026-09-05 14:14:53 L1=1.31 run=2 blk=1 avail=9145 (66.4%) swpO=0 conn=3 myRSS=2101 php=5 phpRSS=244 ap=17 tcp=27 topuser=madalice 2026-09-05 14:15:03 L1=1.42 run=5 blk=1 avail=8884 (64.5%) swpO=2 conn=1 myRSS=2101 php=8 phpRSS=452 ap=31 tcp=81 topuser=madalice 2026-09-05 14:15:03 L1=1.42 run=5 blk=1 avail=8881 (64.5%) swpO=2 conn=4 myRSS=2101 php=8 phpRSS=456 ap=31 tcp=81 topuser=madalice 2026-09-05 14:15:13 L1=1.74 run=1 blk=1 avail=8632 (62.7%) swpO=219 conn=1 myRSS=2096 php=7 phpRSS=426 ap=72 tcp=30 topuser=madalice 2026-09-05 14:15:14 L1=1.74 run=3 blk=1 avail=8632 (62.7%) swpO=199 conn=4 myRSS=2096 php=7 phpRSS=426 ap=72 tcp=30 topuser=madalice 2026-09-05 14:15:24 L1=1.63 run=1 blk=1 avail=8658 (62.8%) swpO=0 conn=1 myRSS=2096 php=7 phpRSS=459 ap=62 tcp=29 topuser=madalice 2026-09-05 14:15:24 L1=1.63 run=3 blk=1 avail=8659 (62.9%) swpO=0 conn=4 myRSS=2096 php=7 phpRSS=459 ap=62 tcp=29 topuser=madalice 2026-09-05 14:15:34 L1=1.61 run=1 blk=1 avail=8907 (64.7%) swpO=222 conn=1 myRSS=2090 php=6 phpRSS=267 ap=52 tcp=29 topuser=madalice 2026-09-05 14:15:34 L1=1.61 run=6 blk=1 avail=8904 (64.6%) swpO=222 conn=4 myRSS=2090 php=6 phpRSS=281 ap=52 tcp=29 topuser=madalice 2026-09-05 14:15:44 L1=1.90 run=3 blk=1 avail=8914 (64.7%) swpO=0 conn=1 myRSS=2090 php=7 phpRSS=363 ap=42 tcp=33 topuser=madalice 2026-09-05 14:15:44 L1=1.90 run=4 blk=1 avail=8907 (64.6%) swpO=0 conn=4 myRSS=2090 php=7 phpRSS=371 ap=42 tcp=33 topuser=madalice 2026-09-05 14:15:54 L1=2.06 run=1 blk=1 avail=9069 (65.8%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=32 tcp=33 topuser=madalice 2026-09-05 14:15:54 L1=2.06 run=2 blk=1 avail=9068 (65.8%) swpO=0 conn=4 myRSS=2090 php=5 phpRSS=221 ap=32 tcp=33 topuser=madalice 2026-09-05 14:16:04 L1=2.28 run=2 blk=1 avail=9236 (67.0%) swpO=0 conn=1 myRSS=2090 php=4 phpRSS=89 ap=22 tcp=27 topuser=evolution 2026-09-05 14:16:04 L1=2.28 run=2 blk=1 avail=9236 (67.0%) swpO=0 conn=1 myRSS=2090 php=4 phpRSS=89 ap=22 tcp=27 topuser=evolution 2026-09-05 14:16:14 L1=2.24 run=3 blk=1 avail=9160 (66.5%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=33 topuser=madalice 2026-09-05 14:16:14 L1=2.24 run=3 blk=2 avail=9159 (66.5%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=33 topuser=madalice 2026-09-05 14:16:24 L1=2.05 run=1 blk=1 avail=9192 (66.7%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=27 topuser=madalice 2026-09-05 14:16:24 L1=2.05 run=2 blk=1 avail=9192 (66.7%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=27 topuser=madalice 2026-09-05 14:16:34 L1=1.88 run=2 blk=1 avail=9156 (66.5%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=284 ap=16 tcp=35 topuser=olympic 2026-09-05 14:16:34 L1=1.88 run=3 blk=1 avail=9154 (66.4%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=285 ap=16 tcp=35 topuser=olympic 2026-09-05 14:16:44 L1=2.19 run=1 blk=1 avail=9153 (66.4%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=245 ap=17 tcp=28 topuser=madalice 2026-09-05 14:16:44 L1=2.09 run=3 blk=1 avail=9153 (66.4%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=245 ap=17 tcp=28 topuser=madalice 2026-09-05 14:16:54 L1=1.93 run=3 blk=1 avail=9046 (65.7%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=367 ap=18 tcp=140 topuser=madalice 2026-09-05 14:16:54 L1=1.93 run=4 blk=1 avail=9047 (65.7%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=367 ap=18 tcp=140 topuser=madalice 2026-09-05 14:17:04 L1=2.10 run=6 blk=1 avail=7193 (52.2%) swpO=633 conn=5 myRSS=2073 php=15 phpRSS=1620 ap=140 tcp=92 topuser=madalice 2026-09-05 14:17:04 L1=2.10 run=5 blk=1 avail=7188 (52.2%) swpO=633 conn=4 myRSS=2073 php=15 phpRSS=1622 ap=139 tcp=92 topuser=madalice 2026-09-05 14:14:43 L1=1.37 run=2 blk=1 avail=9125 (66.2%) swpO=0 conn=1 myRSS=2101 php=6 phpRSS=279 ap=17 tcp=29 topuser=madalice 2026-09-05 14:14:43 L1=1.37 run=3 blk=1 avail=9119 (66.2%) swpO=0 conn=3 myRSS=2101 php=6 phpRSS=275 ap=17 tcp=29 topuser=madalice 2026-09-05 14:14:53 L1=1.31 run=1 blk=1 avail=9146 (66.4%) swpO=0 conn=1 myRSS=2101 php=5 phpRSS=244 ap=17 tcp=27 topuser=madalice 2026-09-05 14:14:53 L1=1.31 run=2 blk=1 avail=9145 (66.4%) swpO=0 conn=3 myRSS=2101 php=5 phpRSS=244 ap=17 tcp=27 topuser=madalice 2026-09-05 14:15:03 L1=1.42 run=5 blk=1 avail=8884 (64.5%) swpO=2 conn=1 myRSS=2101 php=8 phpRSS=452 ap=31 tcp=81 topuser=madalice 2026-09-05 14:15:03 L1=1.42 run=5 blk=1 avail=8881 (64.5%) swpO=2 conn=4 myRSS=2101 php=8 phpRSS=456 ap=31 tcp=81 topuser=madalice 2026-09-05 14:15:13 L1=1.74 run=1 blk=1 avail=8632 (62.7%) swpO=219 conn=1 myRSS=2096 php=7 phpRSS=426 ap=72 tcp=30 topuser=madalice 2026-09-05 14:15:14 L1=1.74 run=3 blk=1 avail=8632 (62.7%) swpO=199 conn=4 myRSS=2096 php=7 phpRSS=426 ap=72 tcp=30 topuser=madalice 2026-09-05 14:15:24 L1=1.63 run=1 blk=1 avail=8658 (62.8%) swpO=0 conn=1 myRSS=2096 php=7 phpRSS=459 ap=62 tcp=29 topuser=madalice 2026-09-05 14:15:24 L1=1.63 run=3 blk=1 avail=8659 (62.9%) swpO=0 conn=4 myRSS=2096 php=7 phpRSS=459 ap=62 tcp=29 topuser=madalice 2026-09-05 14:15:34 L1=1.61 run=1 blk=1 avail=8907 (64.7%) swpO=222 conn=1 myRSS=2090 php=6 phpRSS=267 ap=52 tcp=29 topuser=madalice 2026-09-05 14:15:34 L1=1.61 run=6 blk=1 avail=8904 (64.6%) swpO=222 conn=4 myRSS=2090 php=6 phpRSS=281 ap=52 tcp=29 topuser=madalice 2026-09-05 14:15:44 L1=1.90 run=3 blk=1 avail=8914 (64.7%) swpO=0 conn=1 myRSS=2090 php=7 phpRSS=363 ap=42 tcp=33 topuser=madalice 2026-09-05 14:15:44 L1=1.90 run=4 blk=1 avail=8907 (64.6%) swpO=0 conn=4 myRSS=2090 php=7 phpRSS=371 ap=42 tcp=33 topuser=madalice 2026-09-05 14:15:54 L1=2.06 run=1 blk=1 avail=9069 (65.8%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=32 tcp=33 topuser=madalice 2026-09-05 14:15:54 L1=2.06 run=2 blk=1 avail=9068 (65.8%) swpO=0 conn=4 myRSS=2090 php=5 phpRSS=221 ap=32 tcp=33 topuser=madalice 2026-09-05 14:16:04 L1=2.28 run=2 blk=1 avail=9236 (67.0%) swpO=0 conn=1 myRSS=2090 php=4 phpRSS=89 ap=22 tcp=27 topuser=evolution 2026-09-05 14:16:04 L1=2.28 run=2 blk=1 avail=9236 (67.0%) swpO=0 conn=1 myRSS=2090 php=4 phpRSS=89 ap=22 tcp=27 topuser=evolution 2026-09-05 14:16:14 L1=2.24 run=3 blk=1 avail=9160 (66.5%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=33 topuser=madalice 2026-09-05 14:16:14 L1=2.24 run=3 blk=2 avail=9159 (66.5%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=33 topuser=madalice 2026-09-05 14:16:24 L1=2.05 run=1 blk=1 avail=9192 (66.7%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=27 topuser=madalice 2026-09-05 14:16:24 L1=2.05 run=2 blk=1 avail=9192 (66.7%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=221 ap=16 tcp=27 topuser=madalice 2026-09-05 14:16:34 L1=1.88 run=2 blk=1 avail=9156 (66.5%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=284 ap=16 tcp=35 topuser=olympic 2026-09-05 14:16:34 L1=1.88 run=3 blk=1 avail=9154 (66.4%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=285 ap=16 tcp=35 topuser=olympic 2026-09-05 14:16:44 L1=2.19 run=1 blk=1 avail=9153 (66.4%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=245 ap=17 tcp=28 topuser=madalice 2026-09-05 14:16:44 L1=2.09 run=3 blk=1 avail=9153 (66.4%) swpO=0 conn=1 myRSS=2090 php=5 phpRSS=245 ap=17 tcp=28 topuser=madalice 2026-09-05 14:16:54 L1=1.93 run=3 blk=1 avail=9046 (65.7%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=367 ap=18 tcp=140 topuser=madalice 2026-09-05 14:16:54 L1=1.93 run=4 blk=1 avail=9047 (65.7%) swpO=0 conn=1 myRSS=2090 php=6 phpRSS=367 ap=18 tcp=140 topuser=madalice 2026-09-05 14:17:04 L1=2.10 run=6 blk=1 avail=7193 (52.2%) swpO=633 conn=5 myRSS=2073 php=15 phpRSS=1620 ap=140 tcp=92 topuser=madalice 2026-09-05 14:17:04 L1=2.10 run=5 blk=1 avail=7188 (52.2%) swpO=633 conn=4 myRSS=2073 php=15 phpRSS=1622 ap=139 tcp=92 topuser=madalice