INCIDENT 2026-09-06 23:06:55 trigger: php_rss=1664MB ================================================================== load: 2.59 1.67 1.64 6/710 234051 ncpu:10 mem_avail: 8538MB/13777MB (62.0%) swap_used:2476MB swapout:126/s blocked(D):1 running:8 iowait:7.6% steal:0.0% php: 13 procs / 1664MB heaviest user: madalice (9 procs, 1641MB) apache: 42 procs tcp_estab: 60 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 9 1672 mysql 1 1490 root 253 925 nobody 41 658 netdata 8 246 mailman 20 109 wp-toolkit 3 56 dovenull 6 55 cpanellogin 1 47 kurri 3 39 mailnull 3 30 alison 2 26 dovecot 3 23 aaa 1 15 lowrange 1 14 infinium 1 14 named 1 11 zabbix 1 10 evolution 11 10 polkitd 1 9 --- php workers by user --- USER PROCS RSS_MB madalice 9 1688 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7696 MB Active(file): 3419 MB Inactive(file): 4471 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 557 MB CommitLimit: 10984 MB Committed_AS: 9550 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 201857 root 06:55 1280 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 5-20:44:30 5440 /usr/bin/imunify-agent-proxy 4109079 root 1-18:22:08 1824 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-18:22:08 111336 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1526636 3.0 Ssl 1-03:30:25 /usr/sbin/mariadbd 233825 167896 madalice 241804 52.4 R 00:09 php-fpm: pool madalice_com_au 233817 167896 madalice 234656 49.9 R 00:10 php-fpm: pool madalice_com_au 233815 167896 madalice 227524 48.9 R 00:10 php-fpm: pool madalice_com_au 233189 167896 madalice 221596 14.6 R 01:18 php-fpm: pool madalice_com_au 233816 167896 madalice 214820 48.3 R 00:10 php-fpm: pool madalice_com_au 166870 1 netdata 187848 2.6 Ssl 20:44:36 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 233827 167896 madalice 160116 44.5 S 00:09 php-fpm: pool madalice_com_au 233829 167896 madalice 159892 41.5 S 00:09 php-fpm: pool madalice_com_au 233826 167896 madalice 159852 41.4 S 00:09 php-fpm: pool madalice_com_au 233828 167896 madalice 158864 41.6 S 00:09 php-fpm: pool madalice_com_au 220207 168913 root 158492 0.0 S 20:28:38 spamd child 167871 1 root 149480 0.0 Ss 20:44:29 /usr/lib/systemd/systemd-journald 4109105 4109079 root 111336 1.4 Sl 1-18:22:08 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 168913 1 root 94808 0.0 Ss 20:43:26 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 182429 1353308 cpanellogin 48420 0.0 S 15:17 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2902970 168913 root 43000 0.0 S 07:25:21 spamd child 1353308 1 root 42060 0.1 Ss 46-20:25:42 cpsrvd (SSL) - waiting for connections 167562 166914 netdata 38460 0.1 Sl 20:44:31 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 36788 0.1 Ss 69-12:57:11 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509236 509098 root 35288 0.0 Sl 9-20:47:16 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31588 0.0 Ss 20:44:40 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 167896 1 root 23928 0.0 Ss 20:44:28 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 23872 0.0 Ss 69-12:57:11 tailwatchd 217595 506832 nobody 22648 0.0 S 04:01 /usr/sbin/httpd -k start 217510 506832 nobody 19764 0.0 S 04:04 /usr/sbin/httpd -k start 233413 506832 nobody 19652 0.0 S 00:52 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19552 0.0 Ss 20:44:29 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 233372 506832 nobody 18956 0.0 S 00:55 /usr/sbin/httpd -k start 233928 506832 nobody 18456 0.2 S 00:05 /usr/sbin/httpd -k start 233892 506832 nobody 18380 0.2 S 00:07 /usr/sbin/httpd -k start 233911 506832 nobody 18372 0.1 S 00:06 /usr/sbin/httpd -k start 233916 506832 nobody 18372 0.1 S 00:06 /usr/sbin/httpd -k start 233915 506832 nobody 18332 0.3 S 00:06 /usr/sbin/httpd -k start 233894 506832 nobody 18324 0.2 S 00:07 /usr/sbin/httpd -k start 233914 506832 nobody 18296 0.3 S 00:06 /usr/sbin/httpd -k start 233893 506832 nobody 18264 0.2 S 00:07 /usr/sbin/httpd -k start 233918 506832 nobody 18256 0.1 S 00:06 /usr/sbin/httpd -k start 233917 506832 nobody 18252 0.1 S 00:06 /usr/sbin/httpd -k start 233937 506832 nobody 18076 0.0 S 00:05 /usr/sbin/httpd -k start 218599 506832 nobody 17672 0.2 S 02:03 /usr/sbin/httpd -k start 233415 506832 nobody 17508 0.0 S 00:52 /usr/sbin/httpd -k start 233404 506832 nobody 17464 0.0 S 00:53 /usr/sbin/httpd -k start 233414 506832 nobody 17440 0.0 S 00:52 /usr/sbin/httpd -k start 233405 506832 nobody 17396 0.0 S 00:53 /usr/sbin/httpd -k start 167566 166914 netdata 17292 2.1 Sl 20:44:31 /usr/libexec/netdata/plugins.d/apps.plugin 1 233824 506832 nobody 16892 0.0 S 00:09 /usr/sbin/httpd -k start 233832 506832 nobody 16792 0.1 S 00:08 /usr/sbin/httpd -k start 233831 506832 nobody 16772 0.0 S 00:08 /usr/sbin/httpd -k start 166897 1471 root 16744 0.0 S 17:26 cPhulkd - dbprocessor 233891 506832 nobody 16712 0.1 S 00:07 /usr/sbin/httpd -k start 233934 506832 nobody 16356 0.0 S 00:05 /usr/sbin/httpd -k start 233932 506832 nobody 16296 0.0 S 00:05 /usr/sbin/httpd -k start 233935 506832 nobody 16164 0.2 S 00:05 /usr/sbin/httpd -k start 3942600 167382 aaa 15984 0.0 S 02:20:09 dovecot/imap 233913 506832 nobody 15832 0.0 S 00:06 /usr/sbin/httpd -k start 1471 1 root 15768 0.0 Ss 69-12:57:11 cPhulkd - processor 233922 506832 nobody 15768 0.0 S 00:05 /usr/sbin/httpd -k start 233925 506832 nobody 15768 0.0 S 00:05 /usr/sbin/httpd -k start 233933 506832 nobody 15764 0.0 S 00:05 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+-------------+-------------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+-------------+-------------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 779574 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 779570 | madalice_wp | madalice_wp | Query | 0 | Sending data | SELECT post_id FROM AMuqf6qZ_postmeta, AMuqf6qZ_posts WHERE ID = post_id AND post_type = 'post' AND meta_key = '_wp_old_slug' AND meta_value = 'credentials-json' | +--------+-------------+-------------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 135 infinium/infinium.net.au-ssl_log 59 madalice/madalice.com.au-ssl_log 23 otterfencing/otterfencing.com.au-ssl_log 7 aaa/aaadownunder.com.au-ssl_log 2 corpkicks/corporatekicks.com.au-ssl_log 2 customc/customcentral.com.au-ssl_log 2 alison/alisonarts.com.au-ssl_log 1 evolution/my.evolutionerp.com.au-ssl_log 1 speedlin/speedlinefencing.com.au-ssl_log 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 135 40.115.94.245 59 45.148.10.9 14 8.235.104.11 3 114.119.143.14 2 216.244.66.243 2 118.127.40.55 2 114.119.131.88 1 51.81.169.194 1 51.81.165.89 1 51.81.164.204 1 51.81.164.146 1 51.81.163.63 1 40.77.167.132 1 34.196.51.17 1 3.215.59.93 --- top request paths across all vhosts (last 3 min) --- 22 POST / 8 POST /index.php 5 GET /store/kids-swarovski-crystal-airmax90/ 5 GET / 4 POST /wp-json/batch/v1 3 POST /wp-json/Batch/v1 3 POST /wp-json/batch/v1/ 3 POST //wp-json/batch/v1 3 POST /wordpress/wp-json/batch/v1 3 POST /blog/wp-json/batch/v1 3 GET /wp-json/gravitysmtp/v1/tests/mock-data 2 POST /wp-cron.php 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 2 GET /store/lacelocks/ 2 GET /rclone.conf 2 GET /index.php 2 GET /.env.old 2 GET /.env.bak 2 GET /cgi-sys/suspendedpage.cgi 2 GET /api/getItem/SHSG252516-8 --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/RHSG7550408 2 GET /api/getItem/RHSG7550308 2 GET /api/getItem/RHSG7550258 2 GET /api/getItem/RHSG15050308 2 GET /api/getItem/RHSG15050208 2 GET /api/getItem/RHSG150100408 2 GET /api/getItem/RHSG12575408 2 GET /api/getItem/RHSG12575308 2 GET /api/getItem/RHSG1257530 2 GET /api/getItem/RHSG10050208 -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:23:06:14 +1000] "GET /api/getItem/RHSG501009-7320 HTTP/1.1" 200 1502 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:14 +1000] "GET /api/getItem/RHSG502516-8 HTTP/1.1" 200 1290 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:14 +1000] "GET /api/getItem/RHSG502520-8 HTTP/1.1" 200 1452 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:15 +1000] "GET /api/getItem/RHSG65161255 HTTP/1.1" 200 1358 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:15 +1000] "GET /api/getItem/RHSG7550208 HTTP/1.1" 200 1709 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:16 +1000] "GET /api/getItem/RHSG7550258 HTTP/1.1" 200 1340 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:16 +1000] "GET /api/getItem/RHSG7550308 HTTP/1.1" 200 1340 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:16 +1000] "GET /api/getItem/SHSG10010020-8 HTTP/1.1" 200 1788 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:17 +1000] "GET /api/getItem/SHSG10010020-DP25-8 HTTP/1.1" 200 1541 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:23:06:17 +1000] "GET /api/getItem/SHSG10010020-SP25-8 HTTP/1.1" 200 1541 "-" "RestSharp/106.13.0.0" == infinium/infinium.net.au-ssl_log == -- top paths -- 22 POST / 8 POST /index.php 4 POST /wp-json/batch/v1 3 POST /wp-json/Batch/v1 3 POST /wp-json/batch/v1/ 3 POST //wp-json/batch/v1 3 POST /wordpress/wp-json/batch/v1 3 POST /blog/wp-json/batch/v1 3 GET /wp-json/gravitysmtp/v1/tests/mock-data 3 GET / 1 POST /signin 1 POST /login -- last 10 requests -- 45.148.10.9 - - [06/Sep/2026:23:05:30 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:30 +1000] "GET /livewire/update HTTP/1.1" 400 52 "-" "Mozilla/5.0" 45.148.10.9 - - [06/Sep/2026:23:05:34 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:35 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:38 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:39 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:46 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:47 +1000] "POST / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:05:55 +1000] "POST /login HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:23:06:04 +1000] "POST /signin HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/kids-swarovski-crystal-airmax90/ 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 2 GET /store/lacelocks/ 2 GET /secrets.yml 2 GET /rclone.conf 2 GET /.env.old 2 GET /.env.bak 1 POST /graphql 1 GET /store/sweet-candy-kids-customs 1 GET /store/kidscarskicks/ 1 GET /config/.env 1 GET /backend/.env -- last 10 requests -- 114.119.131.88 - - [06/Sep/2026:23:06:46 +1000] "GET /store/kids-swarovski-crystal-airmax90/?rating=4&image=1 HTTP/1.1" 200 51245 "https://madalice.com.au/store/kids-swarovski-crystal-airmax90/?rating=4&image=1" "Mozilla 8.235.104.11 - - [06/Sep/2026:23:06:49 +1000] "GET /config/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 8.235.104.11 - - [06/Sep/2026:23:06:49 +1000] "GET /backend/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 8.235.104.11 - - [06/Sep/2026:23:06:48 +1000] "GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au HTTP/1.1" 404 36655 "https://www.madalice.com.au/z9x8c7v6b5-debug-trigger-www.madalice.com.au" "Mozilla/5.0 (compatible; Hu 8.235.104.11 - - [06/Sep/2026:23:06:48 +1000] "GET /.env.bak HTTP/1.1" 404 36627 "https://www.madalice.com.au/.env.bak" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 8.235.104.11 - - [06/Sep/2026:23:06:48 +1000] "GET /.env.old HTTP/1.1" 404 36613 "https://www.madalice.com.au/.env.old" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.c 8.235.104.11 - - [06/Sep/2026:23:06:49 +1000] "GET /rclone.conf HTTP/1.1" 404 36646 "https://www.madalice.com.au/rclone.conf" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 8.235.104.11 - - [06/Sep/2026:23:06:51 +1000] "GET /secrets.yml HTTP/1.1" 301 1 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 8.235.104.11 - - [06/Sep/2026:23:06:53 +1000] "POST /graphql HTTP/1.1" 404 36650 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537 8.235.104.11 - - [06/Sep/2026:23:06:54 +1000] "GET /secrets.yml HTTP/1.1" 404 36629 "https://www.madalice.com.au/secrets.yml" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" --- last 30 samples (run-up to this incident) --- 2026-09-06 23:04:33 L1=1.41 run=1 blk=1 avail=10044(72.9%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=178 ap=14 tcp=33 topuser=madalice 2026-09-06 23:04:35 L1=1.41 run=1 blk=1 avail=10039(72.9%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=178 ap=14 tcp=34 topuser=madalice 2026-09-06 23:04:43 L1=1.34 run=3 blk=1 avail=10001(72.6%) swpO=0 conn=1 myRSS=1492 php=6 phpRSS=247 ap=14 tcp=33 topuser=madalice 2026-09-06 23:04:45 L1=1.34 run=1 blk=1 avail=10034(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=178 ap=14 tcp=32 topuser=madalice 2026-09-06 23:04:53 L1=1.36 run=3 blk=1 avail=9959 (72.3%) swpO=0 conn=1 myRSS=1492 php=6 phpRSS=274 ap=15 tcp=38 topuser=madalice 2026-09-06 23:04:55 L1=1.36 run=2 blk=1 avail=10019(72.7%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=178 ap=15 tcp=33 topuser=madalice 2026-09-06 23:05:03 L1=1.54 run=3 blk=1 avail=10003(72.6%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=179 ap=14 tcp=32 topuser=madalice 2026-09-06 23:05:05 L1=1.54 run=5 blk=1 avail=10012(72.7%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=179 ap=14 tcp=34 topuser=madalice 2026-09-06 23:05:14 L1=1.54 run=1 blk=1 avail=10027(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=179 ap=13 tcp=30 topuser=madalice 2026-09-06 23:05:15 L1=1.54 run=2 blk=1 avail=10007(72.6%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=201 ap=13 tcp=34 topuser=madalice 2026-09-06 23:05:24 L1=1.46 run=1 blk=1 avail=10026(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=13 tcp=31 topuser=madalice 2026-09-06 23:05:25 L1=1.46 run=2 blk=1 avail=10026(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=13 tcp=32 topuser=madalice 2026-09-06 23:05:34 L1=1.39 run=2 blk=1 avail=10028(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=13 tcp=31 topuser=madalice 2026-09-06 23:05:35 L1=1.39 run=1 blk=1 avail=10028(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=13 tcp=31 topuser=madalice 2026-09-06 23:05:44 L1=1.33 run=1 blk=1 avail=10052(73.0%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=154 ap=13 tcp=31 topuser=madalice 2026-09-06 23:05:45 L1=1.33 run=1 blk=1 avail=10052(73.0%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=154 ap=13 tcp=29 topuser=madalice 2026-09-06 23:05:54 L1=1.27 run=1 blk=1 avail=10052(73.0%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=154 ap=13 tcp=30 topuser=madalice 2026-09-06 23:05:55 L1=1.27 run=1 blk=1 avail=10056(73.0%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=154 ap=13 tcp=28 topuser=madalice 2026-09-06 23:06:04 L1=1.23 run=1 blk=1 avail=9936 (72.1%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=28 tcp=47 topuser=madalice 2026-09-06 23:06:05 L1=1.23 run=2 blk=1 avail=9922 (72.0%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=28 tcp=39 topuser=madalice 2026-09-06 23:06:14 L1=1.20 run=3 blk=1 avail=9988 (72.5%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=21 tcp=28 topuser=madalice 2026-09-06 23:06:15 L1=1.20 run=1 blk=1 avail=9994 (72.5%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=20 tcp=28 topuser=madalice 2026-09-06 23:06:24 L1=1.49 run=1 blk=1 avail=10023(72.7%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=15 tcp=30 topuser=madalice 2026-09-06 23:06:25 L1=1.49 run=1 blk=1 avail=10023(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=177 ap=15 tcp=30 topuser=madalice 2026-09-06 23:06:34 L1=1.41 run=1 blk=1 avail=10035(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=178 ap=13 tcp=29 topuser=madalice 2026-09-06 23:06:35 L1=1.41 run=1 blk=1 avail=10034(72.8%) swpO=0 conn=1 myRSS=1492 php=5 phpRSS=178 ap=13 tcp=30 topuser=madalice 2026-09-06 23:06:44 L1=1.35 run=4 blk=1 avail=9966 (72.3%) swpO=0 conn=1 myRSS=1492 php=6 phpRSS=277 ap=13 tcp=30 topuser=madalice 2026-09-06 23:06:45 L1=1.35 run=3 blk=1 avail=9843 (71.4%) swpO=0 conn=1 myRSS=1492 php=7 phpRSS=430 ap=13 tcp=31 topuser=olympic 2026-09-06 23:06:54 L1=2.59 run=5 blk=1 avail=8722 (63.3%) swpO=126 conn=1 myRSS=1490 php=13 phpRSS=1470 ap=42 tcp=59 topuser=madalice 2026-09-06 23:06:55 L1=2.59 run=8 blk=1 avail=8538 (62.0%) swpO=126 conn=6 myRSS=1490 php=13 phpRSS=1664 ap=42 tcp=60 topuser=madalice