INCIDENT 2026-08-13 23:13:03 trigger: php_rss=2244MB mysql_conn=23 ================================================================== load: 3.35 1.37 1.02 28/682 1338354 ncpu:10 mem_avail: 5129MB/11729MB (43.7%) swap_used:1327MB swapout:215/s blocked(D):0 running:27 iowait:0.2% steal:0.0% php: 24 procs / 2244MB heaviest user: madalice (24 procs, 2244MB) apache: 87 procs tcp_estab: 114 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 23 2406 mysql 1 2239 nobody 86 1419 root 239 867 netdata 8 256 dovenull 6 66 kurri 4 56 aaa 2 30 mailman 20 29 dovecot 3 28 cpanellogin 1 24 wp-toolkit 6 19 evolution 4 18 mailnull 3 15 lowrange 1 14 corpkicks 1 14 zabbix 1 12 named 1 6 nscd 1 3 dbus 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 23 2419 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5746 MB Active(file): 2634 MB Inactive(file): 2037 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 406 MB CommitLimit: 9960 MB Committed_AS: 11728 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 22:01:47 4584 /usr/bin/imunify-agent-proxy 1331798 root 13:03 1300 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 2292868 14.5 Ssl 1-02:39:32 /usr/sbin/mariadbd 1220 1 netdata 203888 2.5 Ssl 45-13:03:05 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 388652 382990 root 175392 0.0 S 20:39:05 spamd child 1338257 1337568 madalice 169376 47.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338300 1337520 madalice 150220 61.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338312 1338224 madalice 141200 61.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 138460 0.0 Ss 24-13:26:13 /usr/lib/systemd/systemd-journald 1338307 1338218 madalice 129828 51.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338308 1338232 madalice 128424 52.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338299 1338237 madalice 128312 50.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338302 1337681 madalice 123960 50.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 382990 1 root 122552 0.0 Ss 20:50:17 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1338297 1338231 madalice 115584 48.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338303 1338228 madalice 109584 40.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338317 1337596 madalice 106612 44.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338304 1338235 madalice 106600 38.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338309 1338234 madalice 102332 36.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338298 1338226 madalice 100608 33.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338301 1338236 madalice 99576 32.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338306 1338229 madalice 98832 34.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338315 1337683 madalice 95516 29.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338323 1338319 madalice 95076 59.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338318 1337686 madalice 80708 40.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 955146 382990 root 79848 0.0 S 09:22:13 spamd child 1338322 1337582 madalice 74620 34.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338321 1337533 madalice 74044 30.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338324 1338320 madalice 71792 30.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338330 1338147 madalice 67724 27.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1338369 1338157 madalice 42804 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2223 1201 root 42428 0.0 Sl 45-13:03:04 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41936 0.0 Ss 22-20:31:35 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 33152 0.1 Sl 45-13:03:00 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 31084 0.1 Ss 45-13:03:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 382254 1 root 26052 0.0 Ss 20:50:51 lfd - sleeping 1318469 1353308 cpanellogin 25380 0.0 S 39:37 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 1337557 1276780 nobody 20680 0.0 S 01:26 /usr/sbin/httpd -k start 1336803 1276780 nobody 20140 0.0 S 02:54 /usr/sbin/httpd -k start 1336814 1276780 nobody 19884 0.0 S 02:53 /usr/sbin/httpd -k start 1337552 1276780 nobody 19744 0.0 S 01:26 /usr/sbin/httpd -k start 1337692 1276780 nobody 19588 0.0 S 01:12 /usr/sbin/httpd -k start 1337577 1276780 nobody 19568 0.0 S 01:26 /usr/sbin/httpd -k start 1337526 1276780 nobody 19496 0.0 S 01:28 /usr/sbin/httpd -k start 1337568 1276780 nobody 19472 0.0 S 01:26 /usr/sbin/httpd -k start 1337596 1276780 nobody 19404 0.0 S 01:26 /usr/sbin/httpd -k start 1337686 1276780 nobody 19352 0.0 S 01:13 /usr/sbin/httpd -k start 1338141 1276780 nobody 19272 0.3 R 00:08 /usr/sbin/httpd -k start 1337520 1276780 nobody 19236 0.0 S 01:29 /usr/sbin/httpd -k start 1337576 1276780 nobody 19196 0.0 R 01:26 /usr/sbin/httpd -k start 1338157 1276780 nobody 18940 0.1 S 00:06 /usr/sbin/httpd -k start 1337582 1276780 nobody 18596 0.0 S 01:26 /usr/sbin/httpd -k start 1337559 1276780 nobody 18488 0.0 S 01:26 /usr/sbin/httpd -k start 1338196 1276780 nobody 18476 0.2 S 00:05 /usr/sbin/httpd -k start 1337533 1276780 nobody 18464 0.0 S 01:27 /usr/sbin/httpd -k start 1337681 1276780 nobody 18452 0.0 S 01:14 /usr/sbin/httpd -k start 1337683 1276780 nobody 18396 0.0 S 01:13 /usr/sbin/httpd -k start 185104 2431 netdata 18348 2.0 Rl 1-02:39:23 /usr/libexec/netdata/plugins.d/apps.plugin 1 1338192 1276780 nobody 18312 0.0 S 00:05 /usr/sbin/httpd -k start 1338153 1276780 nobody 18304 0.3 S 00:06 /usr/sbin/httpd -k start 1338155 1276780 nobody 18300 0.1 S 00:06 /usr/sbin/httpd -k start 1338156 1276780 nobody 18252 0.3 S 00:06 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 5380461 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 36 evolution/portal.evolutionerp.com.au-ssl_log 17 (total vhosts taking traffic: 2) --- top client IPs across all vhosts (last 3 min) --- 17 203.54.180.238 3 108.65.161.173 2 43.156.39.66 2 114.119.130.40 1 93.157.180.30 1 89.151.189.159 1 77.81.171.13 1 77.79.148.23 1 45.184.143.58 1 43.119.100.103 1 40.77.167.62 1 27.79.234.218 1 213.55.245.161 1 2.13.232.119 1 190.53.68.103 --- top request paths across all vhosts (last 3 min) --- 17 GET /heartbeat.php 4 GET / 2 POST / 1 GET /terms-and-conditions/ 1 GET /store/xl-magnetic-drop-down-side-door-sneaker-display-case-black/ 1 GET /store/travis-af1-custom/ 1 GET /store/toys-kids-custom-shoes/ 1 GET /store/swarovski-crystal-am90/ 1 GET /store/pink-af1s/ 1 GET /store/mad-alice-custom-shoe-magnetic-drop-side-display-cases/ 1 GET /store/fluffy-laces/ 1 GET /store/design-your-own-pet-themed-sneakers/ 1 GET /store/delivery-insurance/ 1 GET /store/baby-crocs/ 1 GET /product-tag/yoda/ 1 GET /product-tag/weed/ 1 GET /product-tag/swarovski/ 1 GET /product-tag/sneakers/ 1 GET /product-tag/sketchy/ 1 GET /product-category/socks/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 4 GET / 2 POST / 1 GET /terms-and-conditions/ 1 GET /store/xl-magnetic-drop-down-side-door-sneaker-display-case-black/ 1 GET /store/travis-af1-custom/ 1 GET /store/toys-kids-custom-shoes/ 1 GET /store/swarovski-crystal-am90/ 1 GET /store/pink-af1s/ 1 GET /store/mad-alice-custom-shoe-magnetic-drop-side-display-cases/ 1 GET /store/fluffy-laces/ 1 GET /store/design-your-own-pet-themed-sneakers/ 1 GET /store/delivery-insurance/ -- last 10 requests -- 77.79.148.23 - - [13/Aug/2026:23:12:57 +1000] "GET /brand/jordan/?srsltid=AfmBOoqFtuVMI4L8nrVkgQzJDDO8fRdBTebH-14C_Ns6PfG3XOfoEVqV HTTP/1.1" 200 29675 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537. 177.81.73.70 - - [13/Aug/2026:23:12:57 +1000] "GET /brand/adidas/?srsltid=AfmBOoo2XudNNT5_ZchdNmsyr-Fi8GM2_Zn_Pu0z62pplqnZFK5GF7JO HTTP/1.1" 200 31376 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537. 2.13.232.119 - - [13/Aug/2026:23:12:58 +1000] "GET /customizing-nike-shoes/?srsltid=AfmBOoo1QgJ3LlBk3izTh8oLwrWF5x3GenM00UQXe8qw6-6ILMFExMEr HTTP/1.1" 200 32049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleW 186.22.238.67 - - [13/Aug/2026:23:12:58 +1000] "GET /product-category/accessories/?srsltid=AfmBOopexfCkByUWJxmKOUc1fdvIOWhc4PrqMR2q812esviM5IbBI0Oo HTTP/1.1" 200 34643 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) 102.104.3.164 - - [13/Aug/2026:23:12:58 +1000] "GET /on-sale/?srsltid=AfmBOoqVKZNPocx0KvQNB69UiAZMdFxa1MyIKHOY0c4A7c-jxEP4_2oQ HTTP/1.1" 200 32477 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 ( 93.157.180.30 - - [13/Aug/2026:23:12:58 +1000] "GET /category/collab/?srsltid=AfmBOorkrdy_HpRFTb5bXQ2JspfkGEgAY3ztkff8ZYy3hbQ_ByY2eQEO HTTP/1.1" 200 30979 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/ 102.253.101.21 - - [13/Aug/2026:23:12:58 +1000] "GET /store/fluffy-laces/?srsltid=AfmBOooy8U2EinM-vqbLYQ3a-YHJBkbGlG5OXRfS9s21Bsvqc3AhBkFE HTTP/1.1" 200 46544 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb 43.119.100.103 - - [13/Aug/2026:23:12:59 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/product-tag/sketchy/?srsltid=AfmBOoq7oW8zh9AuKteDq_q8CmQL4ZxLDVAHxCR3ZOQQe6i0FJpnm3A 187.250.167.100 - - [13/Aug/2026:23:13:00 +1000] "GET /terms-and-conditions/?srsltid=AfmBOoovKy-qbpwiMy8k-Qnps4Cw-gAlfSeeK1GnW4tT7puQzozO-25R HTTP/1.1" 200 33138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple 45.184.143.58 - - [13/Aug/2026:23:13:00 +1000] "GET /store/delivery-insurance/?srsltid=AfmBOook9JnDsPLPog6vujuhwY2JmRUI6Ke3xvK3RaR0whp7PxvhVA_b HTTP/1.1" 200 43299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) App == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 17 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:23:11:37 +1000] "GET /heartbeat.php?sentAt=1786626693&bytes=106,125,194,133&_=1786596792027 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:11:40 +1000] "GET /heartbeat.php?sentAt=1786626700&bytes=106,125,194,140&_=1786602369778 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:11:43 +1000] "GET /heartbeat.php?sentAt=1786626703&bytes=106,125,194,143&_=1786596792028 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:11:52 +1000] "GET /heartbeat.php?sentAt=1786626710&bytes=106,125,194,150&_=1786602369779 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:11:53 +1000] "GET /heartbeat.php?sentAt=1786626713&bytes=106,125,194,153&_=1786596792029 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:12:00 +1000] "GET /heartbeat.php?sentAt=1786626720&bytes=106,125,194,160&_=1786602369780 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:12:03 +1000] "GET /heartbeat.php?sentAt=1786626723&bytes=106,125,194,163&_=1786596792030 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:12:10 +1000] "GET /heartbeat.php?sentAt=1786626730&bytes=106,125,194,170&_=1786602369781 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:12:13 +1000] "GET /heartbeat.php?sentAt=1786626733&bytes=106,125,194,173&_=1786596792031 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:23:12:20 +1000] "GET /heartbeat.php?sentAt=1786626740&bytes=106,125,194,180&_=1786602369782 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-13 23:10:37 L1=1.37 run=1 blk=0 avail=7261 (61.9%) swpO=0 conn=1 myRSS=2245 php=0 phpRSS=0 ap=18 tcp=19 topuser=- 2026-08-13 23:10:43 L1=1.26 run=1 blk=0 avail=7286 (62.1%) swpO=0 conn=1 myRSS=2245 php=0 phpRSS=0 ap=14 tcp=19 topuser=- 2026-08-13 23:10:47 L1=1.32 run=5 blk=0 avail=7103 (60.6%) swpO=0 conn=3 myRSS=2245 php=2 phpRSS=246 ap=14 tcp=20 topuser=madalice 2026-08-13 23:10:53 L1=1.22 run=2 blk=1 avail=7276 (62.0%) swpO=0 conn=1 myRSS=2245 php=0 phpRSS=0 ap=15 tcp=24 topuser=- 2026-08-13 23:10:57 L1=1.20 run=1 blk=0 avail=7277 (62.0%) swpO=0 conn=3 myRSS=2245 php=0 phpRSS=0 ap=15 tcp=21 topuser=- 2026-08-13 23:11:03 L1=1.10 run=4 blk=0 avail=7278 (62.1%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=40 ap=14 tcp=18 topuser=evolution 2026-08-13 23:11:07 L1=1.09 run=1 blk=0 avail=7304 (62.3%) swpO=0 conn=3 myRSS=2245 php=0 phpRSS=0 ap=14 tcp=18 topuser=- 2026-08-13 23:11:13 L1=1.09 run=1 blk=0 avail=7288 (62.1%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=40 ap=14 tcp=22 topuser=evolution 2026-08-13 23:11:18 L1=1.08 run=1 blk=0 avail=7279 (62.1%) swpO=0 conn=3 myRSS=2245 php=0 phpRSS=0 ap=17 tcp=24 topuser=- 2026-08-13 23:11:23 L1=1.07 run=2 blk=0 avail=7152 (61.0%) swpO=0 conn=2 myRSS=2245 php=2 phpRSS=189 ap=17 tcp=21 topuser=madalice 2026-08-13 23:11:28 L1=0.99 run=1 blk=0 avail=7280 (62.1%) swpO=0 conn=3 myRSS=2245 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-13 23:11:33 L1=1.07 run=3 blk=0 avail=6996 (59.6%) swpO=0 conn=2 myRSS=2245 php=3 phpRSS=377 ap=16 tcp=54 topuser=tubesupplies 2026-08-13 23:11:38 L1=1.06 run=4 blk=0 avail=6988 (59.6%) swpO=0 conn=3 myRSS=2245 php=2 phpRSS=142 ap=76 tcp=77 topuser=alison 2026-08-13 23:11:43 L1=1.06 run=4 blk=0 avail=6875 (58.6%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=41 ap=74 tcp=46 topuser=evolution 2026-08-13 23:11:48 L1=0.97 run=3 blk=0 avail=6673 (56.9%) swpO=0 conn=4 myRSS=2245 php=3 phpRSS=330 ap=69 tcp=58 topuser=customc 2026-08-13 23:11:53 L1=0.89 run=1 blk=0 avail=6796 (57.9%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=41 ap=83 tcp=62 topuser=evolution 2026-08-13 23:11:58 L1=0.82 run=1 blk=0 avail=6842 (58.3%) swpO=0 conn=4 myRSS=2245 php=0 phpRSS=0 ap=78 tcp=24 topuser=- 2026-08-13 23:12:03 L1=0.76 run=1 blk=0 avail=6864 (58.5%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=40 ap=73 tcp=21 topuser=evolution 2026-08-13 23:12:08 L1=0.78 run=2 blk=0 avail=6911 (58.9%) swpO=0 conn=4 myRSS=2245 php=0 phpRSS=0 ap=68 tcp=22 topuser=- 2026-08-13 23:12:13 L1=0.71 run=1 blk=0 avail=6942 (59.2%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=41 ap=63 tcp=22 topuser=evolution 2026-08-13 23:12:18 L1=0.66 run=1 blk=0 avail=6987 (59.6%) swpO=0 conn=4 myRSS=2245 php=0 phpRSS=0 ap=58 tcp=18 topuser=- 2026-08-13 23:12:23 L1=0.60 run=1 blk=0 avail=7008 (59.8%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=40 ap=53 tcp=20 topuser=evolution 2026-08-13 23:12:28 L1=0.64 run=2 blk=0 avail=6880 (58.7%) swpO=0 conn=4 myRSS=2245 php=2 phpRSS=236 ap=48 tcp=27 topuser=tubesupplies 2026-08-13 23:12:33 L1=0.82 run=3 blk=0 avail=6966 (59.4%) swpO=0 conn=2 myRSS=2245 php=2 phpRSS=184 ap=43 tcp=23 topuser=madalice 2026-08-13 23:12:38 L1=0.76 run=1 blk=0 avail=7127 (60.8%) swpO=0 conn=4 myRSS=2245 php=0 phpRSS=0 ap=38 tcp=22 topuser=- 2026-08-13 23:12:43 L1=0.70 run=1 blk=0 avail=7152 (61.0%) swpO=0 conn=2 myRSS=2245 php=1 phpRSS=41 ap=33 tcp=20 topuser=evolution 2026-08-13 23:12:48 L1=0.64 run=1 blk=0 avail=7200 (61.4%) swpO=0 conn=1 myRSS=2245 php=0 phpRSS=0 ap=28 tcp=21 topuser=- 2026-08-13 23:12:53 L1=0.67 run=5 blk=0 avail=7088 (60.4%) swpO=0 conn=2 myRSS=2245 php=4 phpRSS=281 ap=23 tcp=26 topuser=olympic 2026-08-13 23:12:58 L1=1.82 run=14 blk=0 avail=6233 (53.1%) swpO=0 conn=1 myRSS=2245 php=7 phpRSS=1129 ap=37 tcp=55 topuser=madalice 2026-08-13 23:13:03 L1=3.35 run=27 blk=0 avail=5129 (43.7%) swpO=215 conn=23 myRSS=2239 php=24 phpRSS=2244 ap=87 tcp=114 topuser=madalice