INCIDENT 2026-09-06 20:46:09 trigger: php_rss=1569MB ================================================================== load: 3.62 3.20 2.62 6/696 3941824 ncpu:10 mem_avail: 8595MB/13777MB (62.4%) swap_used:2410MB swapout:0/s blocked(D):1 running:11 iowait:8.3% steal:0.0% php: 14 procs / 1569MB heaviest user: madalice (9 procs, 1354MB) apache: 46 procs tcp_estab: 46 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1493 madalice 9 1359 root 249 841 nobody 45 685 netdata 8 240 evolution 12 202 mailman 20 117 wp-toolkit 3 56 dovenull 6 55 dovecot 3 23 cpanellogin 1 18 aaa 1 15 named 1 13 mailnull 1 13 zabbix 1 11 polkitd 1 9 kurri 1 9 nscd 1 4 rpc 1 3 dbus 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1360 evolution 4 191 root 1 23 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7310 MB Active(file): 3913 MB Inactive(file): 3544 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 532 MB CommitLimit: 10984 MB Committed_AS: 9358 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 5-18:23:43 5708 /usr/bin/imunify-agent-proxy 4109079 root 1-16:01:21 1752 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-16:01:21 83844 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1529124 3.0 Ssl 1-01:09:38 /usr/sbin/mariadbd 3941759 167896 madalice 217108 77.0 R 00:03 php-fpm: pool madalice_com_au 166870 1 netdata 181552 2.6 Ssl 18:23:49 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3941719 167896 madalice 160096 62.0 S 00:06 php-fpm: pool madalice_com_au 3941561 167896 madalice 159884 27.1 R 00:26 php-fpm: pool madalice_com_au 3941564 167896 madalice 159220 22.6 S 00:25 php-fpm: pool madalice_com_au 3941718 167896 madalice 158820 61.1 S 00:06 php-fpm: pool madalice_com_au 220207 168913 root 157704 0.0 S 18:07:51 spamd child 3941761 167896 madalice 141576 63.6 R 00:03 php-fpm: pool madalice_com_au 3941770 167896 madalice 140560 57.6 R 00:03 php-fpm: pool madalice_com_au 3941774 167896 madalice 135960 67.5 S 00:02 php-fpm: pool madalice_com_au 3941771 167896 madalice 131216 77.5 R 00:02 php-fpm: pool madalice_com_au 167871 1 root 111328 0.0 Ss 18:23:42 /usr/lib/systemd/systemd-journald 168913 1 root 94928 0.0 Ss 18:22:39 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4109105 4109079 root 83844 1.4 Sl 1-16:01:21 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 3941775 3941765 evolution 76160 55.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3941833 3941781 tubesupplies 45532 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2902970 168913 root 43232 0.0 S 05:04:34 spamd child 1353308 1 root 41980 0.1 Ss 46-18:04:55 cpsrvd (SSL) - waiting for connections 1469 1 root 41664 0.1 Ss 69-10:36:24 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 38160 0.1 Sl 18:23:44 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34872 0.0 Sl 9-18:26:29 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31852 0.0 Ss 18:23:53 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1463 1 root 24332 0.0 Ss 69-10:36:24 tailwatchd 167896 1 root 23960 0.0 Ss 18:23:41 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3909210 506832 nobody 21528 0.1 S 06:28 /usr/sbin/httpd -k start 3926357 506832 nobody 21092 0.0 S 01:32 /usr/sbin/httpd -k start 3926528 506832 nobody 21016 0.0 S 01:14 /usr/sbin/httpd -k start 3924145 506832 nobody 20892 0.1 S 05:15 /usr/sbin/httpd -k start 3926537 506832 nobody 20104 0.0 S 01:13 /usr/sbin/httpd -k start 3926396 506832 nobody 19720 0.1 S 01:28 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19684 0.0 Ss 18:23:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3926547 506832 nobody 19408 0.0 S 01:12 /usr/sbin/httpd -k start 3926530 506832 nobody 19244 0.0 S 01:14 /usr/sbin/httpd -k start 3926557 506832 nobody 19192 0.0 S 01:12 /usr/sbin/httpd -k start 3890769 1353308 cpanellogin 19092 0.0 S 13:43 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 3926480 506832 nobody 19020 0.0 S 01:18 /usr/sbin/httpd -k start 3926552 506832 nobody 18780 0.0 S 01:12 /usr/sbin/httpd -k start 3941743 506832 nobody 18544 0.3 S 00:06 /usr/sbin/httpd -k start 3941763 506832 nobody 18496 0.6 S 00:03 /usr/sbin/httpd -k start 3941753 506832 nobody 18424 0.2 S 00:04 /usr/sbin/httpd -k start 3941762 506832 nobody 18396 0.6 S 00:03 /usr/sbin/httpd -k start 3941768 506832 nobody 18396 0.6 S 00:03 /usr/sbin/httpd -k start 3941769 506832 nobody 18356 0.3 S 00:03 /usr/sbin/httpd -k start 3941754 506832 nobody 18332 0.2 S 00:04 /usr/sbin/httpd -k start 3941755 506832 nobody 18332 0.2 S 00:04 /usr/sbin/httpd -k start 3941766 506832 nobody 18332 0.3 S 00:03 /usr/sbin/httpd -k start 3941752 506832 nobody 18296 0.5 S 00:04 /usr/sbin/httpd -k start 3941767 506832 nobody 18204 0.3 S 00:03 /usr/sbin/httpd -k start 167566 166914 netdata 17204 2.1 Sl 18:23:44 /usr/libexec/netdata/plugins.d/apps.plugin 1 3941765 506832 nobody 16256 0.3 S 00:03 /usr/sbin/httpd -k start 3651758 167382 aaa 16068 0.0 S 01:24:12 dovecot/imap 3941782 506832 nobody 15856 0.0 S 00:02 /usr/sbin/httpd -k start 3941748 506832 nobody 15800 0.0 S 00:05 /usr/sbin/httpd -k start 3941783 506832 nobody 15800 0.0 S 00:02 /usr/sbin/httpd -k start 3941779 506832 nobody 15792 0.0 S 00:02 /usr/sbin/httpd -k start 166757 1 root 15748 0.0 Ss 18:23:52 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3941747 506832 nobody 15744 0.0 S 00:05 /usr/sbin/httpd -k start 3941778 506832 nobody 15744 0.0 S 00:02 /usr/sbin/httpd -k start 3941777 506832 nobody 15732 0.0 S 00:02 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 722660 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min tubesupplies/tubesupplies.com.au-ssl_log 97 madalice/madalice.com.au-ssl_log 88 evolution/app.evolutionerp.com.au-ssl_log 58 vinesit/vinesit.com.au-ssl_log 8 infinium/infinium.net.au-ssl_log 7 vinesit/vinesit.com.au 6 customc/customcentral.com.au-ssl_log 5 evolution/evolutionerp.com.au-ssl_log 4 evolution/my.evolutionerp.com.au-ssl_log 4 olympic/olympicfencing.com.au-ssl_log 3 corpkicks/corporatekicks.com.au-ssl_log 2 olympic/olympicfencing.com.au 1 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 94 161.33.202.176 60 34.187.199.90 58 40.115.94.245 17 118.127.40.55 14 143.244.57.86 12 35.252.125.63 3 192.147.177.93 2 66.29.132.216 2 17.166.236.71 2 162.213.255.44 2 144.76.72.24 2 115.129.56.130 2 114.119.137.101 1 91.92.243.251 1 52.167.144.20 --- top request paths across all vhosts (last 3 min) --- 42 GET /wp-login.php 37 GET /wp-admin/index.php 23 POST /wp-login.php 11 POST / 10 POST /wp-cron.php 5 GET /store/barbie-pink-af1s/ 4 GET /userfiles 3 POST /functions.php 3 GET /.env.production 3 GET /.env.local 3 GET /.env 3 GET / 2 GET /z9x8c7v6b5-debug-trigger-madalice.com.au 2 GET /wp-json 2 GET /wp-content/upgrade/ 2 GET /wp-admin/includes/upgrade.php 2 GET /wp-admin/includes/update-core.php 2 GET /wp-admin/includes/translation-install.php 2 GET /wp-admin/includes/theme-install.php 2 GET /wp-admin/ --- busiest 3 vhosts: top paths + last 10 requests --- == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 38 GET /wp-login.php 37 GET /wp-admin/index.php 19 POST /wp-login.php 2 POST /wp-cron.php 1 GET /wp-includes/class-wp-walker.php -- last 10 requests -- 161.33.202.176 - - [06/Sep/2026:20:45:52 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko 161.33.202.176 - - [06/Sep/2026:20:45:53 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:45:55 +1000] "POST /wp-login.php HTTP/1.1" 200 8128 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.1 161.33.202.176 - - [06/Sep/2026:20:45:56 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko 161.33.202.176 - - [06/Sep/2026:20:45:57 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:45:58 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko 161.33.202.176 - - [06/Sep/2026:20:46:00 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:46:01 +1000] "POST /wp-login.php HTTP/1.1" 200 8126 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93 161.33.202.176 - - [06/Sep/2026:20:46:02 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko 161.33.202.176 - - [06/Sep/2026:20:46:03 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 == madalice/madalice.com.au-ssl_log == -- top paths -- 8 POST / 5 GET /store/barbie-pink-af1s/ 4 GET /userfiles 3 GET /.env.production 3 GET /.env.local 3 GET /.env 2 GET /z9x8c7v6b5-debug-trigger-madalice.com.au 2 GET /wp-json 2 GET /store/crease-guards/ 2 GET /.env.development 2 GET /api/fs/read 1 POST /v1/graphql -- last 10 requests -- 35.252.125.63 - - [06/Sep/2026:20:46:02 +1000] "GET /.env.backup HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:02 +1000] "GET /.env.example HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:03 +1000] "GET /api/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:03 +1000] "GET /admin/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:02 +1000] "GET /wp-json HTTP/1.1" 200 51147 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:02 +1000] "GET /z9x8c7v6b5-debug-trigger-madalice.com.au HTTP/1.1" 404 36724 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Saf 35.252.125.63 - - [06/Sep/2026:20:46:04 +1000] "GET /backend/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:04 +1000] "GET /config/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:03 +1000] "GET /.env.bak HTTP/1.1" 404 36711 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.125.63 - - [06/Sep/2026:20:46:03 +1000] "GET /.env.old HTTP/1.1" 404 36708 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/IPC2525 1 GET /api/getItem/SGC-100 1 GET /api/getItem/RGW90 1 GET /api/getItem/RGW80 1 GET /api/getItem/RGW160 1 GET /api/getItem/RGW120 1 GET /api/getItem/RGW117T 1 GET /api/getItem/RGW100 1 GET /api/getItem/PT75M 1 GET /api/getItem/PT65M 1 GET /api/getItem/PT50M 1 GET /api/getItem/PT100M -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:20:44:18 +1000] "GET /api/getItem/PC15050 HTTP/1.1" 404 109 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:19 +1000] "GET /api/getItem/PC16 HTTP/1.1" 200 1618 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:19 +1000] "GET /api/getItem/PC19 HTTP/1.1" 404 106 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:20 +1000] "GET /api/getItem/PC5025BL HTTP/1.1" 200 1489 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:20 +1000] "GET /api/getItem/PC7550 HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:20 +1000] "GET /api/getItem/HCR-32 HTTP/1.1" 200 1495 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:21 +1000] "GET /api/getItem/HCR-25 HTTP/1.1" 200 1512 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:21 +1000] "GET /api/getItem/HCR-40 HTTP/1.1" 200 1495 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:21 +1000] "GET /api/getItem/L2 HTTP/1.1" 200 1506 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:22 +1000] "GET /api/getItem/FBM1230G HTTP/1.1" 404 110 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-06 20:43:42 L1=2.64 run=2 blk=1 avail=9860 (71.6%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=266 ap=16 tcp=30 topuser=madalice 2026-09-06 20:43:47 L1=2.59 run=3 blk=1 avail=9859 (71.6%) swpO=0 conn=4 myRSS=1508 php=7 phpRSS=303 ap=16 tcp=32 topuser=madalice 2026-09-06 20:43:52 L1=2.54 run=4 blk=1 avail=9826 (71.3%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=338 ap=16 tcp=29 topuser=madalice 2026-09-06 20:43:57 L1=2.58 run=3 blk=1 avail=9889 (71.8%) swpO=0 conn=4 myRSS=1508 php=6 phpRSS=241 ap=16 tcp=31 topuser=madalice 2026-09-06 20:44:02 L1=2.53 run=3 blk=1 avail=9956 (72.3%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=224 ap=16 tcp=25 topuser=madalice 2026-09-06 20:44:07 L1=2.49 run=2 blk=1 avail=9884 (71.7%) swpO=2 conn=4 myRSS=1508 php=6 phpRSS=305 ap=16 tcp=27 topuser=madalice 2026-09-06 20:44:12 L1=2.45 run=3 blk=1 avail=9876 (71.7%) swpO=2 conn=2 myRSS=1508 php=5 phpRSS=179 ap=16 tcp=26 topuser=madalice 2026-09-06 20:44:17 L1=2.49 run=3 blk=1 avail=9906 (71.9%) swpO=0 conn=4 myRSS=1508 php=6 phpRSS=277 ap=15 tcp=27 topuser=tubesupplies 2026-09-06 20:44:22 L1=2.53 run=2 blk=1 avail=9930 (72.1%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=279 ap=15 tcp=27 topuser=tubesupplies 2026-09-06 20:44:27 L1=2.65 run=4 blk=1 avail=10012(72.7%) swpO=0 conn=4 myRSS=1508 php=6 phpRSS=195 ap=15 tcp=25 topuser=madalice 2026-09-06 20:44:32 L1=2.68 run=4 blk=1 avail=9844 (71.4%) swpO=0 conn=2 myRSS=1508 php=8 phpRSS=426 ap=15 tcp=26 topuser=olympic 2026-09-06 20:44:37 L1=2.63 run=2 blk=1 avail=9928 (72.1%) swpO=0 conn=2 myRSS=1508 php=5 phpRSS=236 ap=18 tcp=28 topuser=madalice 2026-09-06 20:44:42 L1=2.58 run=2 blk=1 avail=9871 (71.6%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=313 ap=19 tcp=32 topuser=madalice 2026-09-06 20:44:48 L1=2.53 run=6 blk=1 avail=9447 (68.6%) swpO=0 conn=2 myRSS=1508 php=10 phpRSS=829 ap=22 tcp=33 topuser=corpkicks 2026-09-06 20:44:53 L1=2.49 run=4 blk=1 avail=9417 (68.3%) swpO=54 conn=2 myRSS=1507 php=10 phpRSS=805 ap=22 tcp=34 topuser=madalice 2026-09-06 20:44:58 L1=4.05 run=16 blk=1 avail=8619 (62.6%) swpO=260 conn=7 myRSS=1500 php=15 phpRSS=1537 ap=53 tcp=56 topuser=madalice 2026-09-06 20:45:03 L1=4.37 run=8 blk=1 avail=8411 (61.1%) swpO=406 conn=7 myRSS=1496 php=16 phpRSS=1749 ap=51 tcp=56 topuser=madalice 2026-09-06 20:45:08 L1=5.62 run=3 blk=1 avail=8458 (61.4%) swpO=293 conn=3 myRSS=1493 php=16 phpRSS=1748 ap=47 tcp=44 topuser=madalice 2026-09-06 20:45:13 L1=5.41 run=4 blk=1 avail=8481 (61.6%) swpO=88 conn=3 myRSS=1493 php=16 phpRSS=1754 ap=43 tcp=32 topuser=madalice 2026-09-06 20:45:19 L1=5.30 run=2 blk=1 avail=8579 (62.3%) swpO=0 conn=3 myRSS=1493 php=16 phpRSS=1706 ap=37 tcp=33 topuser=madalice 2026-09-06 20:45:23 L1=5.03 run=2 blk=1 avail=8589 (62.3%) swpO=0 conn=3 myRSS=1493 php=16 phpRSS=1746 ap=33 tcp=32 topuser=madalice 2026-09-06 20:45:29 L1=4.79 run=2 blk=1 avail=9090 (66.0%) swpO=0 conn=3 myRSS=1493 php=12 phpRSS=1186 ap=27 tcp=30 topuser=madalice 2026-09-06 20:45:33 L1=4.56 run=2 blk=1 avail=9631 (69.9%) swpO=0 conn=3 myRSS=1493 php=8 phpRSS=588 ap=24 tcp=29 topuser=madalice 2026-09-06 20:45:39 L1=4.36 run=2 blk=1 avail=9954 (72.2%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=245 ap=21 tcp=27 topuser=madalice 2026-09-06 20:45:43 L1=4.17 run=4 blk=1 avail=10042(72.9%) swpO=0 conn=3 myRSS=1493 php=5 phpRSS=128 ap=22 tcp=29 topuser=tubesupplies 2026-09-06 20:45:49 L1=4.00 run=2 blk=1 avail=9860 (71.6%) swpO=0 conn=2 myRSS=1493 php=7 phpRSS=344 ap=22 tcp=28 topuser=madalice 2026-09-06 20:45:53 L1=4.08 run=2 blk=1 avail=9775 (70.9%) swpO=0 conn=3 myRSS=1493 php=7 phpRSS=436 ap=22 tcp=27 topuser=madalice 2026-09-06 20:45:59 L1=3.91 run=2 blk=1 avail=9839 (71.4%) swpO=0 conn=2 myRSS=1493 php=7 phpRSS=409 ap=18 tcp=22 topuser=madalice 2026-09-06 20:46:03 L1=3.76 run=6 blk=1 avail=9697 (70.4%) swpO=0 conn=3 myRSS=1493 php=9 phpRSS=613 ap=15 tcp=32 topuser=madalice 2026-09-06 20:46:09 L1=3.62 run=11 blk=1 avail=8595 (62.4%) swpO=0 conn=6 myRSS=1493 php=14 phpRSS=1569 ap=46 tcp=46 topuser=madalice