INCIDENT 2026-08-13 23:55:03 trigger: php_rss=2327MB mysql_conn=16 ================================================================== load: 3.85 1.68 3.01 21/639 1359858 ncpu:10 mem_avail: 7153MB/11729MB (61.0%) swap_used:1271MB swapout:0/s blocked(D):0 running:23 iowait:0.0% steal:0.0% php: 16 procs / 2327MB heaviest user: madalice (15 procs, 2235MB) apache: 47 procs tcp_estab: 83 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 14 2114 nobody 46 704 mysql 1 646 root 248 560 netdata 8 255 olympic 1 98 kurri 5 54 infinium 3 40 lowrange 2 27 wp-toolkit 6 21 dovenull 6 20 cpanellogin 1 18 mailman 20 15 zabbix 1 14 vinesit 1 13 corpkicks 1 13 aaa 2 10 dovecot 3 7 named 1 3 dbus 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 14 2140 olympic 1 99 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4501 MB Active(file): 2197 MB Inactive(file): 1265 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 237 MB CommitLimit: 9960 MB Committed_AS: 9698 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 22:43:47 1112 /usr/bin/imunify-agent-proxy 1359689 root 00:03 3108 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1339177 1 mysql 662084 2.0 Ssl 39:26 /usr/sbin/mariadbd 1359698 1359675 madalice 265120 75.6 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359668 1359641 madalice 249484 54.7 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359781 1356413 madalice 245720 108 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359658 1359640 madalice 241600 47.8 S 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 198480 2.5 Ssl 45-13:45:05 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1359667 1359642 madalice 188980 46.5 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359672 1356593 madalice 185592 44.7 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359744 1359676 madalice 171992 54.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359673 1358205 madalice 153516 35.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359674 1359669 madalice 152276 48.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 388652 382990 root 147400 0.0 S 21:21:05 spamd child 1359802 1359796 madalice 122212 47.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359804 1358685 olympic 110720 44.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359810 1359794 madalice 110536 87.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359811 1359795 madalice 104476 74.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 382990 1 root 83880 0.0 Ss 21:32:17 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1359828 1358216 madalice 82036 50.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1359829 1358210 madalice 73432 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4922 2431 netdata 46972 0.1 Sl 45-13:45:00 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1359869 1359630 madalice 44176 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 42016 0.0 Ss 24-14:08:13 /usr/lib/systemd/systemd-journald 1353308 1 root 41412 0.0 Ss 22-21:13:35 cpsrvd (SSL) - waiting for connections 2223 1201 root 31624 0.0 Sl 45-13:45:04 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1358216 1276780 nobody 22048 0.0 S 02:56 /usr/sbin/httpd -k start 1358205 1276780 nobody 22008 0.0 S 02:57 /usr/sbin/httpd -k start 1356903 1276780 nobody 21796 0.0 S 05:05 /usr/sbin/httpd -k start 1356633 1276780 nobody 21472 0.0 S 05:33 /usr/sbin/httpd -k start 1354145 1276780 nobody 21256 0.0 S 10:17 /usr/sbin/httpd -k start 1356593 1276780 nobody 21136 0.0 S 05:41 /usr/sbin/httpd -k start 1358210 1276780 nobody 21060 0.0 S 02:56 /usr/sbin/httpd -k start 1358211 1276780 nobody 19692 0.0 S 02:56 /usr/sbin/httpd -k start 1356413 1276780 nobody 19676 0.1 S 05:57 /usr/sbin/httpd -k start 1354954 1353308 cpanellogin 19292 0.0 S 09:02 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1358685 1276780 nobody 19148 0.0 S 01:58 /usr/sbin/httpd -k start 1358691 1276780 nobody 18572 0.0 S 01:57 /usr/sbin/httpd -k start 1358217 1276780 nobody 18384 0.0 S 02:56 /usr/sbin/httpd -k start 1359624 1276780 nobody 18236 0.2 S 00:08 /usr/sbin/httpd -k start 1359631 1276780 nobody 18200 0.1 S 00:07 /usr/sbin/httpd -k start 1359621 1276780 nobody 18160 0.1 S 00:09 /usr/sbin/httpd -k start 1359645 1276780 nobody 18132 0.1 S 00:06 /usr/sbin/httpd -k start 1359632 1276780 nobody 18092 0.1 S 00:07 /usr/sbin/httpd -k start 1359625 1276780 nobody 18064 0.2 S 00:08 /usr/sbin/httpd -k start 1359644 1276780 nobody 17992 0.1 S 00:06 /usr/sbin/httpd -k start 1359639 1276780 nobody 17972 0.3 S 00:06 /usr/sbin/httpd -k start 1359643 1276780 nobody 17964 0.1 S 00:06 /usr/sbin/httpd -k start 1359630 1276780 nobody 17956 0.1 S 00:07 /usr/sbin/httpd -k start 1359629 1276780 nobody 17916 0.2 S 00:07 /usr/sbin/httpd -k start 1359723 1359721 root 17880 1.0 S 00:03 /usr/local/cpanel/bin/dcpumon 1357808 1276780 nobody 17856 0.0 S 03:51 /usr/sbin/httpd -k start 1359646 1276780 nobody 17832 0.0 S 00:06 /usr/sbin/httpd -k start 1359793 1276780 nobody 17784 0.0 S 00:02 /usr/sbin/httpd -k start 382254 1 root 17736 0.0 Ss 21:32:51 lfd - sleeping 1358588 1276780 nobody 17624 0.0 S 02:03 /usr/sbin/httpd -k start 1355561 1471 root 16708 0.0 S 07:44 cPhulkd - dbprocessor 1359794 1276780 nobody 15792 0.0 S 00:02 /usr/sbin/httpd -k start 1359640 1276780 nobody 15784 0.0 S 00:06 /usr/sbin/httpd -k start 1359676 1276780 nobody 15784 0.0 S 00:03 /usr/sbin/httpd -k start 1359796 1276780 nobody 15784 0.0 S 00:02 /usr/sbin/httpd -k start 1359795 1276780 nobody 15780 0.0 S 00:02 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2579 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min coscom/coscom.com.au-ssl_log 83 olympic/olympicfencing.com.au-ssl_log 69 olympic/olympicfencing.com.au 47 evolution/portal.evolutionerp.com.au-ssl_log 13 madalice/madalice.com.au-ssl_log 13 infinium/infinium.net.au-ssl_log 5 alison/alisonarts.com.au-ssl_log 3 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 113 85.204.70.90 83 20.251.112.224 13 203.54.180.238 3 65.21.113.247 3 118.127.40.55 2 114.119.140.234 2 114.119.134.10 1 91.92.243.243 1 84.54.72.0 1 66.249.93.66 1 2a03:2880:f802:29:: 1 223.228.163.45 1 200.189.29.190 1 188.70.26.209 1 177.71.43.222 --- top request paths across all vhosts (last 3 min) --- 13 GET /heartbeat.php 4 GET /store/hand-painted-nike-cartoonsketchy/ 3 POST /wp-cron.php 2 GET /wp-includes/js/tinymce/plugins/wpemoji/ 2 GET /wp-includes/js/tinymce/plugins/wpeditimage/ 2 GET /wp-includes/js/tinymce/plugins/wpdialogs/ 2 GET /wp-includes/js/tinymce/plugins/wpautoresize/ 2 GET /wp-includes/js/tinymce/plugins/wordpress/ 2 GET /wp-includes/js/tinymce/plugins/textcolor/ 2 GET /wp-includes/js/tinymce/plugins/tabfocus/ 2 GET /wp-includes/js/tinymce/plugins/paste/ 2 GET /wp-includes/js/tinymce/plugins/media/ 2 GET /wp-includes/js/tinymce/plugins/lists/ 2 GET /wp-includes/js/tinymce/plugins/link/ 2 GET /wp-includes/js/tinymce/plugins/image/ 2 GET /wp-includes/js/tinymce/plugins/hr/ 2 GET /wp-includes/js/tinymce/plugins/fullscreen/ 2 GET /wp-includes/js/tinymce/plugins/directionality/ 2 GET /wp-includes/js/tinymce/plugins/compat3x/css/ 2 GET /wp-includes/js/tinymce/plugins/compat3x/ --- busiest 3 vhosts: top paths + last 10 requests --- == coscom/coscom.com.au-ssl_log == -- top paths -- 2 GET /fffm.php 1 GET /zaza.php 1 GET /z60.php 1 GET /xxw.php 1 GET /xwx1.php 1 GET /xr.php 1 GET /xml.php 1 GET /ww1.php 1 GET /ws.php 1 GET /ws77.php 1 GET /wp-the.php 1 GET /wp.php -- last 10 requests -- 20.251.112.224 - - [13/Aug/2026:23:53:56 +1000] "GET /elp.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:53:56 +1000] "GET /admin-footer.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:53:58 +1000] "GET /inso.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:53:59 +1000] "GET /sc.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:54:00 +1000] "GET /css/index.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:54:00 +1000] "GET /wp-content/plugins/admin.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:54:01 +1000] "GET /shiny.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:54:02 +1000] "GET /403.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:54:02 +1000] "GET /aa1.php HTTP/1.1" 401 36 "-" "-" 20.251.112.224 - - [13/Aug/2026:23:54:03 +1000] "GET /about/function.php HTTP/1.1" 401 36 "-" "-" == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 2 POST /wp-cron.php 1 GET /wp-includes/js/tinymce/wp-includes/js/ 1 GET /wp-includes/js/tinymce/skins/wp-includes/js/tinymce/ 1 GET /wp-includes/js/tinymce/skins/wordpress/ 1 GET /wp-includes/js/tinymce/skins/lightgray/wp-includes/js/tinymce/skins/ 1 GET /wp-includes/js/tinymce/skins/lightgray/img/wp-includes/js/tinymce/skins/lightgray/ 1 GET /wp-includes/js/tinymce/skins/lightgray/img/ 1 GET /wp-includes/js/tinymce/skins/lightgray/fonts/wp-includes/js/tinymce/skins/lightgray/ 1 GET /wp-includes/js/tinymce/skins/lightgray/fonts/ 1 GET /wp-includes/js/tinymce/skins/lightgray/ 1 GET /wp-includes/js/tinymce/skins/ 1 GET /wp-includes/js/tinymce/plugins/wpview/wp-includes/js/tinymce/plugins/ -- last 10 requests -- 85.204.70.90 - - [13/Aug/2026:23:54:32 +1000] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 200 1060 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:33 +1000] "GET /wp-includes/js/tinymce/skins/wp-includes/js/tinymce/ HTTP/1.1" 404 56918 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:35 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 200 1629 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:36 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/wp-includes/js/tinymce/skins/ HTTP/1.1" 404 56918 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:38 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 200 2210 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:39 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 404 56918 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:41 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 200 1459 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:42 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 404 56918 "-" "-" 66.249.93.66 - - [13/Aug/2026:23:54:42 +1000] "GET /.well-known/traffic-advice HTTP/1.1" 404 10936 "-" "Chrome Privacy Preserving Prefetch Proxy" 85.204.70.90 - - [13/Aug/2026:23:54:44 +1000] "GET /wp-includes/js/tinymce/skins/wordpress/ HTTP/1.1" 200 1087 "-" "-" == olympic/olympicfencing.com.au == -- top paths -- 1 GET /wp-includes/js/tinymce//wp-includes/js/ 1 GET /wp-includes/js/tinymce/plugins//wp-includes/js/tinymce/ 1 GET /wp-includes/js/tinymce/plugins/wpemoji/ 1 GET /wp-includes/js/tinymce/plugins/wpeditimage//wp-includes/js/tinymce/plugins/ 1 GET /wp-includes/js/tinymce/plugins/wpeditimage/ 1 GET /wp-includes/js/tinymce/plugins/wpdialogs//wp-includes/js/tinymce/plugins/ 1 GET /wp-includes/js/tinymce/plugins/wpdialogs/ 1 GET /wp-includes/js/tinymce/plugins/wpautoresize//wp-includes/js/tinymce/plugins/ 1 GET /wp-includes/js/tinymce/plugins/wpautoresize/ 1 GET /wp-includes/js/tinymce/plugins/wordpress//wp-includes/js/tinymce/plugins/ 1 GET /wp-includes/js/tinymce/plugins/wordpress/ 1 GET /wp-includes/js/tinymce/plugins/textcolor//wp-includes/js/tinymce/plugins/ -- last 10 requests -- 85.204.70.90 - - [13/Aug/2026:23:53:59 +1000] "GET /wp-includes/js/tinymce/plugins/textcolor//wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 354 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:02 +1000] "GET /wp-includes/js/tinymce/plugins/wordpress/ HTTP/1.1" 301 323 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:02 +1000] "GET /wp-includes/js/tinymce/plugins/wordpress//wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 354 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:05 +1000] "GET /wp-includes/js/tinymce/plugins/wpautoresize/ HTTP/1.1" 301 326 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:05 +1000] "GET /wp-includes/js/tinymce/plugins/wpautoresize//wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 357 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:08 +1000] "GET /wp-includes/js/tinymce/plugins/wpdialogs/ HTTP/1.1" 301 323 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:09 +1000] "GET /wp-includes/js/tinymce/plugins/wpdialogs//wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 354 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:11 +1000] "GET /wp-includes/js/tinymce/plugins/wpeditimage/ HTTP/1.1" 301 325 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:12 +1000] "GET /wp-includes/js/tinymce/plugins/wpeditimage//wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 356 "-" "-" 85.204.70.90 - - [13/Aug/2026:23:54:15 +1000] "GET /wp-includes/js/tinymce/plugins/wpemoji/ HTTP/1.1" 301 321 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-13 23:52:43 L1=1.46 run=4 blk=0 avail=9056 (77.2%) swpO=0 conn=3 myRSS=644 php=2 phpRSS=167 ap=21 tcp=29 topuser=speedlin 2026-08-13 23:52:44 L1=1.46 run=2 blk=0 avail=9163 (78.1%) swpO=0 conn=2 myRSS=644 php=0 phpRSS=0 ap=20 tcp=30 topuser=- 2026-08-13 23:52:53 L1=1.39 run=1 blk=0 avail=9159 (78.1%) swpO=0 conn=3 myRSS=644 php=1 phpRSS=41 ap=19 tcp=30 topuser=evolution 2026-08-13 23:52:54 L1=1.39 run=3 blk=0 avail=9052 (77.2%) swpO=0 conn=2 myRSS=644 php=2 phpRSS=185 ap=19 tcp=31 topuser=speedlin 2026-08-13 23:53:03 L1=1.33 run=2 blk=0 avail=9113 (77.7%) swpO=0 conn=3 myRSS=644 php=2 phpRSS=104 ap=20 tcp=33 topuser=olympic 2026-08-13 23:53:04 L1=1.33 run=3 blk=0 avail=9019 (76.9%) swpO=0 conn=2 myRSS=644 php=2 phpRSS=207 ap=20 tcp=33 topuser=olympic 2026-08-13 23:53:13 L1=1.52 run=3 blk=0 avail=8990 (76.6%) swpO=0 conn=4 myRSS=644 php=3 phpRSS=226 ap=24 tcp=37 topuser=olympic 2026-08-13 23:53:14 L1=1.52 run=3 blk=0 avail=9094 (77.5%) swpO=0 conn=2 myRSS=644 php=0 phpRSS=0 ap=24 tcp=35 topuser=- 2026-08-13 23:53:23 L1=1.53 run=2 blk=0 avail=9020 (76.9%) swpO=0 conn=4 myRSS=644 php=2 phpRSS=190 ap=21 tcp=32 topuser=olympic 2026-08-13 23:53:24 L1=1.53 run=2 blk=0 avail=9070 (77.3%) swpO=0 conn=2 myRSS=644 php=1 phpRSS=111 ap=21 tcp=31 topuser=speedlin 2026-08-13 23:53:33 L1=1.60 run=2 blk=0 avail=8911 (76.0%) swpO=0 conn=4 myRSS=644 php=2 phpRSS=302 ap=21 tcp=33 topuser=madalice 2026-08-13 23:53:34 L1=1.60 run=1 blk=0 avail=9153 (78.0%) swpO=0 conn=2 myRSS=644 php=0 phpRSS=0 ap=21 tcp=30 topuser=- 2026-08-13 23:53:43 L1=1.43 run=1 blk=0 avail=9151 (78.0%) swpO=0 conn=4 myRSS=644 php=1 phpRSS=41 ap=21 tcp=29 topuser=evolution 2026-08-13 23:53:44 L1=1.43 run=3 blk=0 avail=9134 (77.9%) swpO=0 conn=2 myRSS=644 php=1 phpRSS=59 ap=21 tcp=29 topuser=olympic 2026-08-13 23:53:53 L1=1.60 run=1 blk=0 avail=9139 (77.9%) swpO=0 conn=4 myRSS=644 php=1 phpRSS=41 ap=21 tcp=31 topuser=evolution 2026-08-13 23:53:54 L1=1.60 run=2 blk=0 avail=9053 (77.2%) swpO=0 conn=2 myRSS=644 php=1 phpRSS=128 ap=21 tcp=30 topuser=olympic 2026-08-13 23:54:03 L1=1.59 run=4 blk=0 avail=9060 (77.2%) swpO=0 conn=4 myRSS=644 php=3 phpRSS=180 ap=21 tcp=29 topuser=olympic 2026-08-13 23:54:04 L1=1.59 run=3 blk=0 avail=9054 (77.2%) swpO=0 conn=2 myRSS=644 php=1 phpRSS=134 ap=21 tcp=29 topuser=speedlin 2026-08-13 23:54:13 L1=1.59 run=2 blk=0 avail=9040 (77.1%) swpO=0 conn=3 myRSS=644 php=2 phpRSS=164 ap=21 tcp=29 topuser=olympic 2026-08-13 23:54:14 L1=1.59 run=2 blk=0 avail=8955 (76.4%) swpO=0 conn=2 myRSS=644 php=2 phpRSS=248 ap=21 tcp=30 topuser=olympic 2026-08-13 23:54:23 L1=1.42 run=2 blk=0 avail=9154 (78.0%) swpO=0 conn=3 myRSS=645 php=2 phpRSS=68 ap=19 tcp=26 topuser=evolution 2026-08-13 23:54:24 L1=1.42 run=4 blk=0 avail=9000 (76.7%) swpO=0 conn=3 myRSS=645 php=2 phpRSS=228 ap=19 tcp=25 topuser=olympic 2026-08-13 23:54:33 L1=1.52 run=2 blk=0 avail=9105 (77.6%) swpO=0 conn=3 myRSS=645 php=2 phpRSS=136 ap=18 tcp=23 topuser=olympic 2026-08-13 23:54:34 L1=1.52 run=1 blk=0 avail=9183 (78.3%) swpO=0 conn=3 myRSS=645 php=0 phpRSS=0 ap=17 tcp=24 topuser=- 2026-08-13 23:54:43 L1=1.60 run=2 blk=0 avail=9076 (77.4%) swpO=0 conn=3 myRSS=646 php=2 phpRSS=163 ap=17 tcp=26 topuser=olympic 2026-08-13 23:54:44 L1=1.60 run=3 blk=0 avail=9083 (77.4%) swpO=0 conn=3 myRSS=646 php=1 phpRSS=125 ap=17 tcp=26 topuser=olympic 2026-08-13 23:54:53 L1=1.60 run=2 blk=0 avail=8938 (76.2%) swpO=0 conn=3 myRSS=646 php=2 phpRSS=300 ap=17 tcp=28 topuser=madalice 2026-08-13 23:54:54 L1=1.60 run=1 blk=0 avail=9176 (78.2%) swpO=0 conn=3 myRSS=646 php=0 phpRSS=0 ap=17 tcp=30 topuser=- 2026-08-13 23:55:03 L1=3.85 run=23 blk=0 avail=7153 (61.0%) swpO=0 conn=16 myRSS=646 php=16 phpRSS=2327 ap=47 tcp=83 topuser=madalice 2026-08-13 23:55:04 L1=3.85 run=22 blk=0 avail=7071 (60.3%) swpO=0 conn=14 myRSS=646 php=15 phpRSS=2430 ap=47 tcp=90 topuser=madalice