INCIDENT 2026-09-07 18:14:09 trigger: php_rss=1632MB ================================================================== load: 1.98 1.75 1.66 7/746 163574 ncpu:10 mem_avail: 7575MB/13777MB (55.0%) swap_used:2727MB swapout:538/s blocked(D):1 running:7 iowait:8.4% steal:0.0% php: 19 procs / 1632MB heaviest user: madalice (9 procs, 1149MB) apache: 75 procs tcp_estab: 41 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2321 nobody 74 1219 madalice 9 1111 root 257 1040 vinesit 6 499 netdata 8 256 mailman 20 98 cpanellogin 1 91 dovenull 6 68 wp-toolkit 3 55 dovecot 3 28 mailnull 2 16 lowrange 1 15 kurri 1 13 zabbix 1 10 evolution 11 9 named 1 7 polkitd 1 6 nscd 1 4 rpc 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1111 vinesit 6 503 root 1 22 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6567 MB Active(file): 3623 MB Inactive(file): 2909 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 565 MB CommitLimit: 10984 MB Committed_AS: 10679 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 111139 root 14:08 1328 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 6-15:51:44 5520 /usr/bin/imunify-agent-proxy 4109079 root 2-13:29:22 1952 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-13:29:22 106024 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 2377288 8.2 Ssl 1-22:37:39 /usr/sbin/mariadbd 166870 1 netdata 195324 2.6 Ssl 1-15:51:50 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 923653 904997 root 175492 0.0 S 15:44:25 spamd child 3368408 904997 root 160284 0.0 S 04:34:18 spamd child 160726 167896 madalice 159584 4.4 S 03:46 php-fpm: pool madalice_com_au 162839 167896 madalice 158276 10.5 S 01:04 php-fpm: pool madalice_com_au 163268 167896 madalice 157908 21.3 S 00:13 php-fpm: pool madalice_com_au 163349 167896 madalice 155892 22.3 S 00:09 php-fpm: pool madalice_com_au 163401 167896 madalice 135032 16.5 S 00:08 php-fpm: pool madalice_com_au 163266 167896 madalice 119948 21.0 S 00:13 php-fpm: pool madalice_com_au 163269 167896 madalice 115304 19.8 S 00:13 php-fpm: pool madalice_com_au 904997 1 root 114968 0.0 Ss 15:51:13 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 163267 167896 madalice 114600 19.8 S 00:13 php-fpm: pool madalice_com_au 4109105 4109079 root 106024 1.3 Sl 2-13:29:22 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 163536 162823 vinesit 95364 54.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 163537 163348 vinesit 93780 54.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 25290 1353308 cpanellogin 93696 0.0 S 39:51 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 163535 163304 vinesit 92312 55.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 163538 163347 vinesit 90684 52.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 163540 163344 vinesit 88224 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 163541 163343 vinesit 86796 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 167871 1 root 73060 0.0 Ss 1-15:51:43 /usr/lib/systemd/systemd-journald 1353308 1 root 41976 0.1 Ss 47-15:32:56 cpsrvd (SSL) - waiting for connections 1469 1 root 38788 0.1 Ss 70-08:04:25 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 37884 0.1 Sl 1-15:51:45 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34948 0.0 Sl 10-15:54:30 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 163543 1353308 root 34184 0.0 S 00:01 cpsrvd (SSL) - waiting for connections 166645 1 wp-toolkit 31448 0.0 Ss 1-15:51:54 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29724 0.0 Ss 15:51:45 lfd - sleeping 1463 1 root 23636 0.0 Ss 70-08:04:25 tailwatchd 167896 1 root 23292 0.0 Ss 1-15:51:42 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 145730 506832 nobody 21968 0.0 S 04:56 /usr/sbin/httpd -k start 163402 167896 madalice 21648 0.6 S 00:08 php-fpm: pool madalice_com_au 161315 506832 nobody 20908 0.0 S 02:56 /usr/sbin/httpd -k start 162817 506832 nobody 19576 0.0 S 01:06 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19480 0.0 Ss 1-15:51:43 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 162424 506832 nobody 19308 0.0 S 01:37 /usr/sbin/httpd -k start 162637 506832 nobody 19028 0.0 S 01:17 /usr/sbin/httpd -k start 162716 506832 nobody 18972 0.0 S 01:10 /usr/sbin/httpd -k start 163427 506832 nobody 18876 0.0 S 00:07 /usr/sbin/httpd -k start 162799 506832 nobody 18872 0.0 S 01:07 /usr/sbin/httpd -k start 163274 506832 nobody 18864 0.0 S 00:11 /usr/sbin/httpd -k start 163270 506832 nobody 18720 0.0 S 00:12 /usr/sbin/httpd -k start 162748 506832 nobody 18692 0.0 S 01:09 /usr/sbin/httpd -k start 163388 506832 nobody 18668 0.2 S 00:08 /usr/sbin/httpd -k start 163382 506832 nobody 18664 0.2 S 00:08 /usr/sbin/httpd -k start 163384 506832 nobody 18656 0.1 S 00:08 /usr/sbin/httpd -k start 163341 506832 nobody 18640 0.0 S 00:09 /usr/sbin/httpd -k start 163344 506832 nobody 18636 0.1 S 00:09 /usr/sbin/httpd -k start 163343 506832 nobody 18584 0.2 S 00:09 /usr/sbin/httpd -k start 163421 506832 nobody 18548 0.1 S 00:07 /usr/sbin/httpd -k start 162781 506832 nobody 18524 0.0 S 01:08 /usr/sbin/httpd -k start 163342 506832 nobody 18456 0.1 S 00:09 /usr/sbin/httpd -k start 163414 506832 nobody 18448 0.0 S 00:07 /usr/sbin/httpd -k start 163273 506832 nobody 18432 0.0 S 00:11 /usr/sbin/httpd -k start 163304 506832 nobody 18360 0.3 S 00:10 /usr/sbin/httpd -k start 163346 506832 nobody 18356 0.3 S 00:09 /usr/sbin/httpd -k start 163419 506832 nobody 18352 0.1 S 00:07 /usr/sbin/httpd -k start 163396 506832 nobody 18324 0.0 S 00:08 /usr/sbin/httpd -k start 163345 506832 nobody 18288 0.1 S 00:09 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4911314 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 105 evolution/app.evolutionerp.com.au-ssl_log 103 madalice/madalice.com.au-ssl_log 37 vinesit/vinesit.com.au-ssl_log 29 evolution/portal.evolutionerp.com.au-ssl_log 20 evolution/staging.evolutionerp.com.au-ssl_log 18 kurri/kurrimotorinn.com.au-ssl_log 3 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 103 40.115.94.245 64 115.70.61.91 50 203.54.180.238 21 45.94.31.96 18 34.83.212.63 18 138.199.19.193 15 169.58.234.141 8 118.127.40.55 6 147.161.213.78 4 180.181.236.49 3 20.151.10.161 1 52.167.144.180 1 2a03:2880:13ff:3:: 1 114.119.146.16 1 114.119.131.88 --- top request paths across all vhosts (last 3 min) --- 52 GET /api/getItem/LWFBW2001KG 51 GET /api/getItem/LWHG2001KG 43 POST /functions.php 24 GET /app/ajax.php 20 GET /heartbeat.php 10 POST /quoteditsave.php 10 GET /index.php 8 POST / 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax.php 4 GET / 3 POST /app/ajax/selectFilter.php 3 GET /store/pink-butterfly-blossom-af1-shoes/ 3 GET /autodiscover/autodiscover.xml 2 GET /wordpress/ 2 GET /old/ 2 GET /modalload.php 2 GET /logoff.php 2 GET /installer.php 1 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 43 POST /functions.php 24 GET /app/ajax.php 10 POST /quoteditsave.php 10 GET /index.php 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax.php 3 POST /app/ajax/selectFilter.php 2 GET /modalload.php 2 GET /logoff.php 1 POST /logsave.php 1 POST /jobaddsave.php 1 POST /activitiessave.php -- last 10 requests -- 115.70.61.91 - - [07/Sep/2026:18:13:54 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobadd%26quoteid%3D4767&call=getUserSetting&caller=ajaxSubmitLocal&seq=16117117776 HTTP/1.1" 200 99 "https://my.evolutionerp.com.a 115.70.61.91 - - [07/Sep/2026:18:13:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=jobadd"eid=4767" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 203.54.180.238 - - [07/Sep/2026:18:14:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79161" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 115.70.61.91 - - [07/Sep/2026:18:14:05 +1000] "POST /jobaddsave.php HTTP/1.1" 302 47 "https://my.evolutionerp.com.au/index.php?page=jobadd"eid=4767" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTM 115.70.61.91 - - [07/Sep/2026:18:14:06 +1000] "GET /index.php?page=jobedit&id=3086 HTTP/1.1" 200 80623 "https://my.evolutionerp.com.au/index.php?page=jobadd"eid=4767" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 115.70.61.91 - - [07/Sep/2026:18:14:06 +1000] "POST /logsave.php?call=getHistory&id=3086&module=job HTTP/1.1" 200 395 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=3086" "Mozilla/5.0 (Windows NT 10.0; Win64; 115.70.61.91 - - [07/Sep/2026:18:14:06 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18053705411 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/index. 115.70.61.91 - - [07/Sep/2026:18:14:06 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=15799649903 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index.p 115.70.61.91 - - [07/Sep/2026:18:14:06 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D3086&call=getUserSetting&caller=ajaxSubmitLocal&seq=11875579727 HTTP/1.1" 200 111 "https://my.evo 115.70.61.91 - - [07/Sep/2026:18:14:06 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D3086&call=getUserSetting&caller=ajaxSubmitLocal&seq=12421034588 HTTP/1.1" 200 97 "https://my.evolutionerp.com.au/in == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 52 GET /api/getItem/LWFBW2001KG 51 GET /api/getItem/LWHG2001KG -- last 10 requests -- 40.115.94.245 - - [07/Sep/2026:18:14:05 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:05 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:05 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:07 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:18:14:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/pink-butterfly-blossom-af1-shoes/ 1 POST / 1 GET /xmlrpc.php 1 GET /wp-json/wp/v2/pages/4146 1 GET /wp-json/ 1 GET /wp-includes/class-wp-xmlrpc-server.php 1 GET /wp-includes/class-wp-user-meta-session-tokens.php 1 GET /wp-includes/class-wp-text-diff-renderer-inline.php 1 GET /wp-includes/class-wp-styles.php 1 GET /wp-includes/class-wp-simplepie-file.php 1 GET /wp-includes/class-wp-scripts.php 1 GET /wp-includes/class-wp-phpmailer.php -- last 10 requests -- 34.83.212.63 - - [07/Sep/2026:18:14:00 +1000] "GET /returns/ HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 34.83.212.63 - - [07/Sep/2026:18:14:00 +1000] "GET /custom-shoes-contact/ HTTP/1.1" 200 40377 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 34.83.212.63 - - [07/Sep/2026:18:14:00 +1000] "GET /store/custom-design-your-own-kicks-docs/ HTTP/1.1" 200 55191 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobil 34.83.212.63 - - [07/Sep/2026:18:14:00 +1000] "GET /wp-json/ HTTP/1.1" 200 52321 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 34.83.212.63 - - [07/Sep/2026:18:14:00 +1000] "GET /wp-json/wp/v2/pages/4146 HTTP/1.1" 200 7952 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 34.83.212.63 - - [07/Sep/2026:18:14:01 +1000] "GET /afterpay/ HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 34.83.212.63 - - [07/Sep/2026:18:14:01 +1000] "GET /xmlrpc.php HTTP/1.1" 404 36642 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 34.83.212.63 - - [07/Sep/2026:18:14:01 +1000] "GET /product-category/accessories/charms/ HTTP/1.1" 200 38900 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Sa 34.83.212.63 - - [07/Sep/2026:18:14:01 +1000] "GET /product-category/accessories/sneaker-storage/ HTTP/1.1" 200 36155 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 169.58.234.141 - - [07/Sep/2026:18:14:03 +1000] "GET /wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 500 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/5 --- last 30 samples (run-up to this incident) --- 2026-09-07 18:11:39 L1=1.81 run=1 blk=1 avail=9099 (66.0%) swpO=0 conn=1 myRSS=2332 php=6 phpRSS=136 ap=21 tcp=25 topuser=madalice 2026-09-07 18:11:48 L1=1.91 run=1 blk=1 avail=9077 (65.9%) swpO=0 conn=3 myRSS=2337 php=6 phpRSS=136 ap=23 tcp=28 topuser=madalice 2026-09-07 18:11:49 L1=1.91 run=1 blk=1 avail=9075 (65.9%) swpO=0 conn=1 myRSS=2337 php=6 phpRSS=136 ap=23 tcp=29 topuser=madalice 2026-09-07 18:11:58 L1=1.84 run=1 blk=1 avail=9160 (66.5%) swpO=0 conn=3 myRSS=2337 php=5 phpRSS=65 ap=18 tcp=23 topuser=madalice 2026-09-07 18:11:59 L1=1.84 run=2 blk=1 avail=9095 (66.0%) swpO=0 conn=2 myRSS=2337 php=5 phpRSS=135 ap=18 tcp=25 topuser=madalice 2026-09-07 18:12:08 L1=1.79 run=2 blk=1 avail=9083 (65.9%) swpO=0 conn=3 myRSS=2337 php=5 phpRSS=152 ap=17 tcp=21 topuser=madalice 2026-09-07 18:12:09 L1=1.79 run=2 blk=1 avail=9084 (65.9%) swpO=0 conn=2 myRSS=2337 php=5 phpRSS=152 ap=17 tcp=21 topuser=madalice 2026-09-07 18:12:18 L1=1.74 run=2 blk=1 avail=9122 (66.2%) swpO=0 conn=1 myRSS=2337 php=5 phpRSS=108 ap=19 tcp=23 topuser=madalice 2026-09-07 18:12:19 L1=1.74 run=1 blk=1 avail=9122 (66.2%) swpO=0 conn=2 myRSS=2337 php=5 phpRSS=108 ap=19 tcp=23 topuser=madalice 2026-09-07 18:12:28 L1=1.85 run=3 blk=1 avail=8734 (63.4%) swpO=0 conn=1 myRSS=2337 php=8 phpRSS=581 ap=18 tcp=27 topuser=customc 2026-09-07 18:12:29 L1=1.85 run=1 blk=1 avail=9116 (66.2%) swpO=0 conn=2 myRSS=2337 php=5 phpRSS=108 ap=18 tcp=23 topuser=madalice 2026-09-07 18:12:38 L1=1.80 run=1 blk=1 avail=9114 (66.2%) swpO=0 conn=1 myRSS=2337 php=5 phpRSS=114 ap=19 tcp=20 topuser=madalice 2026-09-07 18:12:39 L1=1.80 run=1 blk=1 avail=9123 (66.2%) swpO=0 conn=2 myRSS=2337 php=5 phpRSS=114 ap=18 tcp=20 topuser=madalice 2026-09-07 18:12:48 L1=1.90 run=1 blk=1 avail=9172 (66.6%) swpO=0 conn=1 myRSS=2337 php=5 phpRSS=71 ap=16 tcp=24 topuser=madalice 2026-09-07 18:12:49 L1=1.90 run=1 blk=1 avail=9174 (66.6%) swpO=0 conn=2 myRSS=2337 php=5 phpRSS=71 ap=16 tcp=24 topuser=madalice 2026-09-07 18:12:59 L1=1.84 run=2 blk=1 avail=9175 (66.6%) swpO=0 conn=1 myRSS=2337 php=5 phpRSS=65 ap=17 tcp=41 topuser=madalice 2026-09-07 18:12:59 L1=1.84 run=1 blk=1 avail=9169 (66.6%) swpO=0 conn=1 myRSS=2337 php=5 phpRSS=65 ap=18 tcp=42 topuser=madalice 2026-09-07 18:13:09 L1=1.87 run=3 blk=1 avail=8637 (62.7%) swpO=12 conn=1 myRSS=2337 php=7 phpRSS=475 ap=44 tcp=22 topuser=madalice 2026-09-07 18:13:09 L1=1.87 run=3 blk=1 avail=8538 (62.0%) swpO=12 conn=1 myRSS=2337 php=8 phpRSS=614 ap=43 tcp=26 topuser=corpkicks 2026-09-07 18:13:19 L1=1.81 run=2 blk=1 avail=8929 (64.8%) swpO=3 conn=1 myRSS=2337 php=6 phpRSS=230 ap=34 tcp=22 topuser=madalice 2026-09-07 18:13:19 L1=1.81 run=2 blk=1 avail=8936 (64.9%) swpO=3 conn=1 myRSS=2337 php=6 phpRSS=230 ap=33 tcp=21 topuser=madalice 2026-09-07 18:13:29 L1=1.92 run=2 blk=1 avail=9028 (65.5%) swpO=0 conn=1 myRSS=2337 php=6 phpRSS=188 ap=24 tcp=24 topuser=madalice 2026-09-07 18:13:29 L1=1.92 run=1 blk=1 avail=9035 (65.6%) swpO=0 conn=1 myRSS=2337 php=6 phpRSS=188 ap=23 tcp=23 topuser=madalice 2026-09-07 18:13:39 L1=1.85 run=1 blk=1 avail=9048 (65.7%) swpO=0 conn=1 myRSS=2337 php=6 phpRSS=222 ap=17 tcp=27 topuser=madalice 2026-09-07 18:13:39 L1=1.85 run=2 blk=1 avail=9047 (65.7%) swpO=0 conn=1 myRSS=2337 php=6 phpRSS=222 ap=17 tcp=27 topuser=madalice 2026-09-07 18:13:49 L1=1.79 run=2 blk=1 avail=9029 (65.5%) swpO=0 conn=1 myRSS=2337 php=7 phpRSS=272 ap=16 tcp=25 topuser=madalice 2026-09-07 18:13:49 L1=1.79 run=1 blk=1 avail=9059 (65.8%) swpO=0 conn=1 myRSS=2337 php=6 phpRSS=216 ap=16 tcp=24 topuser=madalice 2026-09-07 18:13:59 L1=1.89 run=2 blk=1 avail=8421 (61.1%) swpO=0 conn=1 myRSS=2337 php=11 phpRSS=924 ap=20 tcp=84 topuser=madalice 2026-09-07 18:13:59 L1=1.89 run=6 blk=1 avail=8412 (61.1%) swpO=0 conn=3 myRSS=2337 php=11 phpRSS=905 ap=24 tcp=80 topuser=madalice 2026-09-07 18:14:09 L1=1.98 run=7 blk=1 avail=7575 (55.0%) swpO=538 conn=7 myRSS=2321 php=19 phpRSS=1632 ap=75 tcp=41 topuser=madalice