INCIDENT 2026-08-14 02:16:17 trigger: php_rss=2374MB mysql_conn=20 ================================================================== load: 2.20 0.86 1.17 25/637 1439437 ncpu:10 mem_avail: 7436MB/11729MB (63.4%) swap_used:1375MB swapout:0/s blocked(D):0 running:26 iowait:0.0% steal:0.0% php: 21 procs / 2374MB heaviest user: madalice (21 procs, 2374MB) apache: 49 procs tcp_estab: 73 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 19 2038 nobody 52 784 mysql 1 618 root 237 492 netdata 8 256 kurri 4 43 wp-toolkit 6 21 dovenull 6 20 mailnull 3 18 lowrange 2 18 cpanellogin 1 18 aaa 2 18 zabbix 1 12 infinium 1 12 corpkicks 1 12 mailman 20 11 dovecot 3 8 cpanelconnecttrack 1 3 polkitd 1 2 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 19 2071 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4059 MB Active(file): 2300 MB Inactive(file): 1055 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 225 MB CommitLimit: 9960 MB Committed_AS: 10344 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 01:05:01 452 /usr/bin/imunify-agent-proxy 1436670 root 05:22 62192 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 632972 1.8 Ssl 37:16 /usr/sbin/mariadbd 1220 1 netdata 204416 2.5 Ssl 45-16:06:19 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1439368 1439361 madalice 180528 85.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439371 1439340 madalice 159468 69.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439386 1438951 madalice 149412 119 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 955146 382990 root 139680 0.0 S 12:25:27 spamd child 1439375 1438385 madalice 132244 56.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439372 1436395 madalice 130476 60.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439376 1439362 madalice 127064 50.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439370 1437653 madalice 125612 49.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439373 1439255 madalice 124868 53.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439374 1439317 madalice 115732 47.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439384 1438337 madalice 109360 44.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439379 1439369 madalice 108968 47.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439378 1439364 madalice 108956 39.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439382 1436399 madalice 107900 41.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439391 1439316 madalice 107864 76.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439377 1439363 madalice 106500 43.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439388 1438386 madalice 96184 67.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439385 1438960 madalice 95604 57.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439387 1436406 madalice 83724 46.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1439392 1439329 madalice 80476 40.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1436670 1 root 62192 0.4 Ssl 05:22 /opt/imunify360/venv/bin/python3 -m imav.run 159820 1 root 57568 0.0 Ss 24-16:29:27 /usr/lib/systemd/systemd-journald 4922 2431 netdata 41760 0.1 Sl 45-16:06:14 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 29692 0.0 Ss 22-23:34:49 cpsrvd (SSL) - waiting for connections 2223 1201 root 24532 0.0 Sl 45-16:06:18 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1436469 1276780 nobody 22408 0.0 S 05:50 /usr/sbin/httpd -k start 1436381 1276780 nobody 22304 0.0 S 05:56 /usr/sbin/httpd -k start 1436399 1276780 nobody 22212 0.0 S 05:54 /usr/sbin/httpd -k start 1436395 1276780 nobody 21704 0.0 S 05:54 /usr/sbin/httpd -k start 1438337 1276780 nobody 20936 0.0 S 02:11 /usr/sbin/httpd -k start 1438951 1276780 nobody 20612 0.0 S 00:55 /usr/sbin/httpd -k start 1437653 1276780 nobody 20424 0.0 S 03:45 /usr/sbin/httpd -k start 1426887 382990 root 20376 0.0 S 24:30 spamd child 1438956 1276780 nobody 18960 0.0 S 00:54 /usr/sbin/httpd -k start 1416966 1353308 cpanellogin 18920 0.0 S 42:50 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1438960 1276780 nobody 18652 0.0 S 00:53 /usr/sbin/httpd -k start 1436406 1276780 nobody 18452 0.0 S 05:54 /usr/sbin/httpd -k start 1438386 1276780 nobody 18216 0.0 S 02:09 /usr/sbin/httpd -k start 1438385 1276780 nobody 17968 0.0 S 02:10 /usr/sbin/httpd -k start 1439329 1276780 nobody 17944 0.1 S 00:06 /usr/sbin/httpd -k start 1439337 1276780 nobody 17876 0.0 S 00:05 /usr/sbin/httpd -k start 1439255 1276780 nobody 17520 0.1 S 00:11 /usr/sbin/httpd -k start 1439334 1276780 nobody 17416 0.4 S 00:05 /usr/sbin/httpd -k start 1439355 1276780 nobody 17208 0.0 S 00:04 /usr/sbin/httpd -k start 1439338 1276780 nobody 17188 0.2 S 00:05 /usr/sbin/httpd -k start 1439317 1276780 nobody 17180 0.1 S 00:07 /usr/sbin/httpd -k start 1439316 1276780 nobody 17144 0.4 S 00:07 /usr/sbin/httpd -k start 1439336 1276780 nobody 17144 0.2 S 00:05 /usr/sbin/httpd -k start 1439326 1276780 nobody 17116 0.1 S 00:06 /usr/sbin/httpd -k start 1427540 1471 root 17016 0.0 S 23:10 cPhulkd - dbprocessor 1439335 1276780 nobody 16988 0.2 S 00:05 /usr/sbin/httpd -k start 1439359 1276780 nobody 16984 0.0 S 00:04 /usr/sbin/httpd -k start 1439349 1276780 nobody 16964 0.0 S 00:04 /usr/sbin/httpd -k start 1439351 1276780 nobody 16924 0.2 S 00:04 /usr/sbin/httpd -k start 1439341 1276780 nobody 16920 0.0 S 00:05 /usr/sbin/httpd -k start 1439356 1276780 nobody 16904 0.0 S 00:04 /usr/sbin/httpd -k start 1439360 1276780 nobody 16896 0.2 S 00:04 /usr/sbin/httpd -k start 1439352 1276780 nobody 16856 0.2 S 00:04 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2528 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 29 evolution/portal.evolutionerp.com.au-ssl_log 24 alison/alisonarts.com.au-ssl_log 3 evolution/my.evolutionerp.com.au-ssl_log 2 olympic/olympicfencing.com.au-ssl_log 2 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 24 203.54.180.238 3 12.44.33.162 2 193.109.213.93 2 14.190.111.236 2 114.119.159.70 2 114.119.143.14 2 103.189.66.9 1 86.129.177.88 1 51.235.60.63 1 47.82.202.133 1 45.164.233.85 1 2a03:2880:f802:6:: 1 212.33.105.30 1 207.46.13.116 1 201.71.202.226 --- top request paths across all vhosts (last 3 min) --- 24 GET /heartbeat.php 4 GET / 3 POST / 3 GET /store/hand-painted-nike-af1-liverpool/ 2 GET /store/hand-painted-nike-af1-justin/ 2 GET /index.php 2 GET /custom-painted-wrx-helmet/ 1 GET /wedding-sneakers/ 1 GET /store/pink-butterfly-blossom-af1-shoes/ 1 GET /store/pearl-and-lace-shoe-bows/ 1 GET /store/nike-gold-eyelets/ 1 GET /store/new-balance-550-icecream/ 1 GET /store/kids-donut-sprinkle-af1/ 1 GET /store/kids-af1-multi-coloured-blocks-edition/ 1 GET /store/kids-af1-brown-bear-edition/ 1 GET /store/custom-golf-inspired-sneakers/ 1 GET /store/butterfly-air-force-1-with-crystal-swoosh/ 1 GET /store/black-and-white-custom-groom-and-groomsmen-af1/ 1 GET /product-tag/swarovski-crystals/ 1 GET /product-tag/sunflower/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 3 POST / 3 GET /store/hand-painted-nike-af1-liverpool/ 2 GET /store/hand-painted-nike-af1-justin/ 2 GET / 1 GET /wedding-sneakers/ 1 GET /store/pink-butterfly-blossom-af1-shoes/ 1 GET /store/pearl-and-lace-shoe-bows/ 1 GET /store/nike-gold-eyelets/ 1 GET /store/new-balance-550-icecream/ 1 GET /store/kids-donut-sprinkle-af1/ 1 GET /store/kids-af1-multi-coloured-blocks-edition/ 1 GET /store/kids-af1-brown-bear-edition/ -- last 10 requests -- 153.67.33.6 - - [14/Aug/2026:02:16:11 +1000] "GET /product-tag/bling/ HTTP/1.1" 200 30383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 51.235.60.63 - - [14/Aug/2026:02:16:11 +1000] "GET /store/kids-af1-brown-bear-edition/ HTTP/1.1" 200 46019 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safa 176.111.178.94 - - [14/Aug/2026:02:16:11 +1000] "GET /store/custom-golf-inspired-sneakers/ HTTP/1.1" 200 48097 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 114.119.159.70 - - [14/Aug/2026:02:16:12 +1000] "GET /store/pink-butterfly-blossom-af1-shoes/?amp%3Brating=2&wcpr_rating=4&wcpr_page=2&rating=5 HTTP/1.1" 301 1 "https://madalice.com.au/store/pink-butterfly-blossom-af1-sh 177.75.137.204 - - [14/Aug/2026:02:16:12 +1000] "GET /product-tag/floral/ HTTP/1.1" 200 30377 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 47.82.202.133 - - [14/Aug/2026:02:16:13 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/product-tag/sunflower/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/ 105.209.161.57 - - [14/Aug/2026:02:16:13 +1000] "GET /store/pearl-and-lace-shoe-bows/ HTTP/1.1" 200 44378 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safar 181.117.12.61 - - [14/Aug/2026:02:16:13 +1000] "GET /store/kids-donut-sprinkle-af1/ HTTP/1.1" 200 43801 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/ 103.189.66.9 - - [14/Aug/2026:02:16:13 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/product-tag/sunflower/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 14.190.111.236 - - [14/Aug/2026:02:16:14 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/store/kids-af1-multi-coloured-blocks-edition/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 24 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:02:15:10 +1000] "GET /heartbeat.php?sentAt=1786637710&bytes=106,125,237,142&_=1786602370879 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:13 +1000] "GET /heartbeat.php?sentAt=1786637713&bytes=106,125,237,145&_=1786596793129 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:20 +1000] "GET /heartbeat.php?sentAt=1786637720&bytes=106,125,237,152&_=1786602370880 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:23 +1000] "GET /heartbeat.php?sentAt=1786637723&bytes=106,125,237,155&_=1786596793130 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:30 +1000] "GET /heartbeat.php?sentAt=1786637730&bytes=106,125,237,162&_=1786602370881 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:33 +1000] "GET /heartbeat.php?sentAt=1786637733&bytes=106,125,237,165&_=1786596793131 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:40 +1000] "GET /heartbeat.php?sentAt=1786637740&bytes=106,125,237,172&_=1786602370882 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:43 +1000] "GET /heartbeat.php?sentAt=1786637743&bytes=106,125,237,175&_=1786596793132 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:50 +1000] "GET /heartbeat.php?sentAt=1786637750&bytes=106,125,237,182&_=1786602370883 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:02:15:53 +1000] "GET /heartbeat.php?sentAt=1786637753&bytes=106,125,237,185&_=1786596793133 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == alison/alisonarts.com.au-ssl_log == -- top paths -- 2 GET /custom-painted-wrx-helmet/ 1 GET /painted-helmets/ -- last 10 requests -- 12.44.33.162 - - [14/Aug/2026:02:14:04 +1000] "GET /custom-painted-wrx-helmet/ HTTP/1.1" 200 12600 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0. 12.44.33.162 - - [14/Aug/2026:02:14:05 +1000] "GET /custom-painted-wrx-helmet/ HTTP/1.1" 200 12600 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0. 12.44.33.162 - - [14/Aug/2026:02:14:21 +1000] "GET /painted-helmets/ HTTP/1.1" 200 15415 "https://alisonarts.com.au/custom-painted-wrx-helmet/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G --- last 30 samples (run-up to this incident) --- 2026-08-14 02:13:57 L1=0.38 run=1 blk=0 avail=9386 (80.0%) swpO=0 conn=2 myRSS=605 php=0 phpRSS=0 ap=16 tcp=23 topuser=- 2026-08-14 02:13:57 L1=0.38 run=3 blk=0 avail=9346 (79.7%) swpO=0 conn=2 myRSS=605 php=2 phpRSS=102 ap=16 tcp=23 topuser=tubesupplies 2026-08-14 02:14:07 L1=0.48 run=1 blk=0 avail=9380 (80.0%) swpO=0 conn=2 myRSS=605 php=0 phpRSS=0 ap=17 tcp=29 topuser=- 2026-08-14 02:14:07 L1=0.48 run=1 blk=0 avail=9379 (80.0%) swpO=0 conn=2 myRSS=605 php=0 phpRSS=0 ap=17 tcp=28 topuser=- 2026-08-14 02:14:17 L1=0.41 run=2 blk=0 avail=9336 (79.6%) swpO=0 conn=2 myRSS=605 php=0 phpRSS=0 ap=23 tcp=27 topuser=- 2026-08-14 02:14:17 L1=0.41 run=1 blk=0 avail=9335 (79.6%) swpO=0 conn=2 myRSS=605 php=0 phpRSS=0 ap=23 tcp=25 topuser=- 2026-08-14 02:14:27 L1=0.35 run=2 blk=0 avail=9274 (79.1%) swpO=0 conn=2 myRSS=605 php=1 phpRSS=101 ap=21 tcp=28 topuser=alison 2026-08-14 02:14:27 L1=0.35 run=2 blk=0 avail=9239 (78.8%) swpO=0 conn=2 myRSS=605 php=1 phpRSS=130 ap=21 tcp=28 topuser=alison 2026-08-14 02:14:37 L1=0.53 run=2 blk=0 avail=9374 (79.9%) swpO=0 conn=1 myRSS=605 php=0 phpRSS=0 ap=17 tcp=24 topuser=- 2026-08-14 02:14:37 L1=0.53 run=1 blk=0 avail=9373 (79.9%) swpO=0 conn=2 myRSS=605 php=0 phpRSS=0 ap=17 tcp=25 topuser=- 2026-08-14 02:14:47 L1=0.45 run=3 blk=0 avail=9231 (78.7%) swpO=0 conn=1 myRSS=610 php=2 phpRSS=196 ap=18 tcp=24 topuser=evolution 2026-08-14 02:14:47 L1=0.45 run=2 blk=0 avail=9160 (78.1%) swpO=0 conn=2 myRSS=615 php=2 phpRSS=259 ap=18 tcp=24 topuser=evolution 2026-08-14 02:14:57 L1=0.46 run=2 blk=0 avail=9386 (80.0%) swpO=0 conn=1 myRSS=615 php=0 phpRSS=0 ap=15 tcp=19 topuser=- 2026-08-14 02:14:57 L1=0.46 run=1 blk=0 avail=9386 (80.0%) swpO=0 conn=2 myRSS=615 php=0 phpRSS=0 ap=15 tcp=20 topuser=- 2026-08-14 02:15:07 L1=0.46 run=3 blk=0 avail=9245 (78.8%) swpO=0 conn=1 myRSS=615 php=2 phpRSS=195 ap=15 tcp=23 topuser=corpkicks 2026-08-14 02:15:07 L1=0.46 run=2 blk=0 avail=9196 (78.4%) swpO=0 conn=2 myRSS=615 php=2 phpRSS=242 ap=15 tcp=23 topuser=corpkicks 2026-08-14 02:15:17 L1=0.39 run=1 blk=0 avail=9338 (79.6%) swpO=0 conn=1 myRSS=615 php=1 phpRSS=69 ap=15 tcp=25 topuser=evolution 2026-08-14 02:15:17 L1=0.39 run=1 blk=0 avail=9337 (79.6%) swpO=0 conn=2 myRSS=615 php=1 phpRSS=69 ap=15 tcp=25 topuser=evolution 2026-08-14 02:15:27 L1=0.41 run=1 blk=0 avail=9331 (79.6%) swpO=0 conn=1 myRSS=615 php=0 phpRSS=0 ap=22 tcp=27 topuser=- 2026-08-14 02:15:27 L1=0.41 run=1 blk=0 avail=9329 (79.5%) swpO=0 conn=1 myRSS=615 php=0 phpRSS=0 ap=22 tcp=27 topuser=- 2026-08-14 02:15:37 L1=0.57 run=1 blk=0 avail=9376 (79.9%) swpO=0 conn=1 myRSS=616 php=0 phpRSS=0 ap=16 tcp=21 topuser=- 2026-08-14 02:15:37 L1=0.57 run=1 blk=0 avail=9373 (79.9%) swpO=0 conn=1 myRSS=616 php=0 phpRSS=0 ap=16 tcp=21 topuser=- 2026-08-14 02:15:47 L1=0.48 run=4 blk=0 avail=9257 (78.9%) swpO=0 conn=1 myRSS=616 php=1 phpRSS=144 ap=16 tcp=20 topuser=madalice 2026-08-14 02:15:47 L1=0.48 run=2 blk=0 avail=9230 (78.7%) swpO=0 conn=1 myRSS=616 php=1 phpRSS=170 ap=16 tcp=20 topuser=madalice 2026-08-14 02:15:57 L1=0.49 run=1 blk=0 avail=9375 (79.9%) swpO=0 conn=1 myRSS=616 php=0 phpRSS=0 ap=15 tcp=24 topuser=- 2026-08-14 02:15:57 L1=0.49 run=2 blk=0 avail=9343 (79.7%) swpO=0 conn=1 myRSS=616 php=1 phpRSS=62 ap=15 tcp=24 topuser=olympic 2026-08-14 02:16:07 L1=0.49 run=2 blk=0 avail=9366 (79.9%) swpO=0 conn=1 myRSS=616 php=0 phpRSS=0 ap=16 tcp=24 topuser=- 2026-08-14 02:16:08 L1=0.49 run=1 blk=0 avail=9365 (79.8%) swpO=0 conn=1 myRSS=616 php=0 phpRSS=0 ap=16 tcp=25 topuser=- 2026-08-14 02:16:17 L1=2.20 run=26 blk=0 avail=7436 (63.4%) swpO=0 conn=20 myRSS=617 php=21 phpRSS=2374 ap=49 tcp=73 topuser=madalice 2026-08-14 02:16:18 L1=2.20 run=25 blk=0 avail=7672 (65.4%) swpO=0 conn=20 myRSS=618 php=19 phpRSS=2065 ap=53 tcp=75 topuser=madalice