INCIDENT 2026-08-15 07:05:45 trigger: php_rss=2242MB mysql_conn=17 ================================================================== load: 4.84 24.88 17.85 20/668 2547759 ncpu:10 mem_avail: 7026MB/11729MB (59.9%) swap_used:1408MB swapout:0/s blocked(D):0 running:18 iowait:0.1% steal:0.0% php: 16 procs / 2242MB heaviest user: madalice (14 procs, 2060MB) apache: 76 procs tcp_estab: 70 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 13 2153 nobody 74 1117 mysql 1 512 root 244 507 netdata 8 217 alison 2 206 evolution 5 42 cpanellogin 1 35 mailnull 4 21 dovenull 6 20 mailman 20 19 wp-toolkit 6 18 zabbix 1 12 vinesit 1 12 kurri 3 7 dovecot 3 7 named 1 3 cpanelconnecttrack 1 3 dbus 1 2 polkitd 1 1 --- php workers by user --- USER PROCS RSS_MB madalice 13 2168 alison 2 208 evolution 1 39 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 2724 MB Active(file): 958 MB Inactive(file): 512 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 181 MB CommitLimit: 9960 MB Committed_AS: 10495 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 05:54:30 208 /usr/bin/imunify-agent-proxy 2544311 root 05:43 0 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 2547204 root 00:44 3124 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 2547741 root 00:00 39388 /opt/imunify360/venv/bin/python /opt/imunify360/venv/share/imunify360/scripts/check-detached.py --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2544865 1 mysql 525036 4.5 Ssl 04:46 /usr/sbin/mariadbd 2547684 2547585 madalice 268620 77.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547680 2547584 madalice 228576 69.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547686 2547651 madalice 224092 69.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547685 2547658 madalice 221192 67.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547689 2546766 madalice 211068 65.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547695 2546392 madalice 181716 163 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547691 2546755 madalice 180048 79.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547697 2547642 madalice 168764 146 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 162548 2.5 Ssl 46-20:55:48 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2390233 2382613 root 138928 0.0 S 04:30:08 spamd child 2547721 2547614 alison 130000 96.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547722 2547613 alison 110552 79.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2382613 1 root 82984 0.0 Ss 04:42:34 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2547725 2546396 madalice 78128 37.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547727 2546254 madalice 77704 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547726 2547552 madalice 75748 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547779 2547598 madalice 56224 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 49952 0.0 Ss 25-21:18:56 /usr/lib/systemd/systemd-journald 2547781 2547601 madalice 47376 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4922 2431 netdata 42200 0.1 Sl 46-20:55:43 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2547750 2547594 evolution 40884 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2547741 2547204 root 39652 0.0 R 00:00 /opt/imunify360/venv/bin/python /opt/imunify360/venv/share/imunify360/scripts/check-detached.py 2525318 1353308 cpanellogin 36684 0.0 S 37:33 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 2547688 2546847 madalice 28708 71.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2547687 2547654 madalice 28680 73.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2390234 2382613 root 22324 0.0 S 04:30:08 spamd child 2223 1201 root 22320 0.0 Sl 46-20:55:47 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 21124 0.1 Ss 46-20:55:47 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2546392 1276780 nobody 20336 0.0 S 02:25 /usr/sbin/httpd -k start 2546396 1276780 nobody 19920 0.0 S 02:25 /usr/sbin/httpd -k start 2381704 1 root 19696 0.0 Ss 04:43:33 lfd - sleeping 2546757 1276780 nobody 19568 0.0 S 01:36 /usr/sbin/httpd -k start 2546767 1276780 nobody 19372 0.0 S 01:35 /usr/sbin/httpd -k start 2546847 1276780 nobody 19196 0.0 S 01:30 /usr/sbin/httpd -k start 2546254 1276780 nobody 19144 0.0 S 02:37 /usr/sbin/httpd -k start 2546865 1276780 nobody 18712 0.0 S 01:29 /usr/sbin/httpd -k start 2546755 1276780 nobody 18364 0.0 S 01:36 /usr/sbin/httpd -k start 2546769 1276780 nobody 17444 0.0 S 01:35 /usr/sbin/httpd -k start 2546766 1276780 nobody 17324 0.0 S 01:35 /usr/sbin/httpd -k start 2547640 1276780 nobody 17272 0.1 S 00:06 /usr/sbin/httpd -k start 2547611 1276780 nobody 17204 0.1 S 00:07 /usr/sbin/httpd -k start 2547612 1276780 nobody 17200 0.1 S 00:07 /usr/sbin/httpd -k start 2547609 1276780 nobody 17188 0.2 S 00:07 /usr/sbin/httpd -k start 2547610 1276780 nobody 17140 0.2 S 00:07 /usr/sbin/httpd -k start 2547617 1276780 nobody 17124 0.2 S 00:07 /usr/sbin/httpd -k start 2547608 1276780 nobody 17120 0.1 S 00:07 /usr/sbin/httpd -k start 2547607 1276780 nobody 17116 0.1 S 00:07 /usr/sbin/httpd -k start 2547639 1276780 nobody 17112 0.3 S 00:06 /usr/sbin/httpd -k start 2547630 1276780 nobody 17108 0.1 S 00:06 /usr/sbin/httpd -k start 2547652 1276780 nobody 17092 0.1 S 00:06 /usr/sbin/httpd -k start 2546772 1276780 nobody 17072 0.0 S 01:35 /usr/sbin/httpd -k start 2547647 1276780 nobody 17052 0.3 S 00:06 /usr/sbin/httpd -k start 2547552 1276780 nobody 17000 0.2 S 00:11 /usr/sbin/httpd -k start 2547642 1276780 nobody 16912 0.0 S 00:06 /usr/sbin/httpd -k start 2547586 1276780 nobody 16140 0.0 S 00:09 /usr/sbin/httpd -k start 185104 2431 netdata 16136 2.0 Sl 2-10:32:06 /usr/libexec/netdata/plugins.d/apps.plugin 1 2547583 1276780 nobody 15832 0.0 S 00:09 /usr/sbin/httpd -k start 2547585 1276780 nobody 15792 0.1 S 00:09 /usr/sbin/httpd -k start 2547584 1276780 nobody 15768 0.0 S 00:09 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +-----+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 444 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 427 | madalice_wp | madalice_wp | Query | 0 | Sending data | SELECT option_value FROM AMuqf6qZ_options WHERE option_name LIKE 'wc_square_background_sync_job_%' AND ( option_value LIKE '%\"status\":\"queued\"%' OR option_value LIKE '%\"status\":\"processing\"%' ) ORDER BY option_id ASC LIMIT 1 | +-----+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min otter2/otterfencing.net.au 92 madalice/madalice.com.au-ssl_log 89 evolution/portal.evolutionerp.com.au-ssl_log 25 aaa/aaadownunder.com.au-ssl_log 1 alison/alisonarts.com.au-ssl_log 1 evolution/my.evolutionerp.com.au-ssl_log 1 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 92 172.161.0.2 25 203.54.180.238 10 34.48.140.215 2 51.68.107.154 2 45.6.78.130 2 45.5.119.14 2 45.175.50.121 2 43.119.100.195 2 41.182.108.156 2 37.239.2.25 2 31.13.160.248 2 206.84.35.111 2 196.190.240.19 2 190.46.82.107 2 189.50.54.162 --- top request paths across all vhosts (last 3 min) --- 26 GET / 25 GET /heartbeat.php 24 POST / 2 GET /baixy.php 1 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 1 GET /yuzuru1.php 1 GET /yj03.php 1 GET /xy.php 1 GET /xwx1.php 1 GET /xtsr.php 1 GET /xigmltad.php 1 GET /xbbih.php 1 GET /xa.php 1 GET /wxeyc.php 1 GET /wtiiy.php 1 GET /ws80.php 1 GET /wpls.php 1 GET /wp-json 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wpc2.php --- busiest 3 vhosts: top paths + last 10 requests --- == otter2/otterfencing.net.au == -- top paths -- 2 GET /baixy.php 1 GET /yuzuru1.php 1 GET /yj03.php 1 GET /xy.php 1 GET /xwx1.php 1 GET /xtsr.php 1 GET /xigmltad.php 1 GET /xbbih.php 1 GET /xa.php 1 GET /wxeyc.php 1 GET /wtiiy.php 1 GET /ws80.php -- last 10 requests -- 172.161.0.2 - - [15/Aug/2026:07:04:57 +1000] "GET /8xyz.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:57 +1000] "GET /ta0ol.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:57 +1000] "GET /cjndd.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:58 +1000] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:58 +1000] "GET /shop.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:59 +1000] "GET /byueb.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:59 +1000] "GET /utchiha_py4mE1XY.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:59 +1000] "GET /gh.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:04:59 +1000] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 404 - "-" "-" 172.161.0.2 - - [15/Aug/2026:07:05:00 +1000] "GET /cgi-bin_bkp.php HTTP/1.1" 404 - "-" "-" == madalice/madalice.com.au-ssl_log == -- top paths -- 26 GET / 24 POST / 1 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 1 GET /wp-json 1 GET /wholesale-at-mad-alice/ 1 GET /tag/xmas/ 1 GET /tag/toddler/ 1 GET /tag/team/ 1 GET /tag/sneakers/ 1 GET /tag/runners/ 1 GET /tag/pink/ 1 GET /tag/nike/ -- last 10 requests -- 34.48.140.215 - - [15/Aug/2026:07:05:30 +1000] "GET / HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.48.140.215 - - [15/Aug/2026:07:05:36 +1000] "GET /.aws/config HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:34 +1000] "GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au HTTP/1.1" 301 1 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:37 +1000] "GET /.aws/credentials HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:35 +1000] "GET /wp-json HTTP/1.1" 200 50289 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:36 +1000] "GET /.git/config HTTP/1.1" 301 1 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:37 +1000] "GET /rclone.conf HTTP/1.1" 301 1 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:37 +1000] "GET /.git-credentials HTTP/1.1" 301 1 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:37 +1000] "GET /.git/HEAD HTTP/1.1" 301 1 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.140.215 - - [15/Aug/2026:07:05:38 +1000] "GET /.gitconfig HTTP/1.1" 301 1 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 25 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [15/Aug/2026:07:04:18 +1000] "GET /heartbeat.php?sentAt=1786741456&bytes=106,127,130,208&_=1786712385163 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:23 +1000] "GET /heartbeat.php?sentAt=1786741463&bytes=106,127,130,215&_=1786683795196 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:25 +1000] "GET /heartbeat.php?sentAt=1786741466&bytes=106,127,130,218&_=1786712385164 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:33 +1000] "GET /heartbeat.php?sentAt=1786741473&bytes=106,127,130,225&_=1786683795197 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:36 +1000] "GET /heartbeat.php?sentAt=1786741476&bytes=106,127,130,228&_=1786712385165 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:43 +1000] "GET /heartbeat.php?sentAt=1786741483&bytes=106,127,130,235&_=1786683795198 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:45 +1000] "GET /heartbeat.php?sentAt=1786741486&bytes=106,127,130,238&_=1786712385166 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:53 +1000] "GET /heartbeat.php?sentAt=1786741493&bytes=106,127,130,245&_=1786683795199 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:04:55 +1000] "GET /heartbeat.php?sentAt=1786741496&bytes=106,127,130,248&_=1786712385167 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:05:03 +1000] "GET /heartbeat.php?sentAt=1786741503&bytes=106,127,130,255&_=1786683795200 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-15 07:03:24 L1=15.10 run=1 blk=0 avail=9081 (77.4%) swpO=0 conn=2 myRSS=500 php=2 phpRSS=189 ap=40 tcp=32 topuser=speedlin 2026-08-15 07:03:25 L1=13.89 run=1 blk=0 avail=9204 (78.5%) swpO=0 conn=8 myRSS=500 php=0 phpRSS=0 ap=39 tcp=31 topuser=- 2026-08-15 07:03:34 L1=12.78 run=1 blk=0 avail=9273 (79.1%) swpO=0 conn=2 myRSS=500 php=1 phpRSS=26 ap=30 tcp=16 topuser=evolution 2026-08-15 07:03:35 L1=11.76 run=1 blk=0 avail=9293 (79.2%) swpO=0 conn=8 myRSS=500 php=0 phpRSS=0 ap=29 tcp=18 topuser=- 2026-08-15 07:03:44 L1=10.89 run=1 blk=0 avail=9354 (79.8%) swpO=0 conn=2 myRSS=500 php=0 phpRSS=0 ap=21 tcp=19 topuser=- 2026-08-15 07:03:45 L1=10.10 run=1 blk=0 avail=9361 (79.8%) swpO=0 conn=8 myRSS=500 php=0 phpRSS=0 ap=20 tcp=19 topuser=- 2026-08-15 07:03:54 L1=8.55 run=2 blk=0 avail=9362 (79.8%) swpO=0 conn=2 myRSS=500 php=0 phpRSS=0 ap=18 tcp=23 topuser=- 2026-08-15 07:03:55 L1=8.55 run=1 blk=0 avail=9366 (79.9%) swpO=0 conn=8 myRSS=500 php=0 phpRSS=0 ap=18 tcp=26 topuser=- 2026-08-15 07:04:04 L1=7.31 run=1 blk=0 avail=9203 (78.5%) swpO=0 conn=3 myRSS=501 php=2 phpRSS=213 ap=20 tcp=26 topuser=infinium 2026-08-15 07:04:05 L1=7.31 run=3 blk=0 avail=9079 (77.4%) swpO=0 conn=8 myRSS=501 php=3 phpRSS=357 ap=20 tcp=28 topuser=infinium 2026-08-15 07:04:14 L1=7.03 run=7 blk=0 avail=8845 (75.4%) swpO=0 conn=3 myRSS=506 php=6 phpRSS=568 ap=36 tcp=49 topuser=madalice 2026-08-15 07:04:15 L1=7.03 run=8 blk=0 avail=8567 (73.0%) swpO=0 conn=7 myRSS=506 php=7 phpRSS=869 ap=38 tcp=50 topuser=madalice 2026-08-15 07:04:24 L1=7.58 run=2 blk=0 avail=9109 (77.7%) swpO=0 conn=3 myRSS=508 php=1 phpRSS=58 ap=47 tcp=36 topuser=madalice 2026-08-15 07:04:25 L1=7.58 run=4 blk=0 avail=8981 (76.6%) swpO=0 conn=7 myRSS=508 php=2 phpRSS=227 ap=46 tcp=30 topuser=madalice 2026-08-15 07:04:34 L1=6.63 run=1 blk=0 avail=9209 (78.5%) swpO=0 conn=3 myRSS=509 php=0 phpRSS=0 ap=37 tcp=183 topuser=- 2026-08-15 07:04:35 L1=6.63 run=2 blk=0 avail=9202 (78.5%) swpO=0 conn=7 myRSS=509 php=0 phpRSS=0 ap=37 tcp=272 topuser=- 2026-08-15 07:04:44 L1=5.77 run=2 blk=0 avail=9027 (77.0%) swpO=0 conn=3 myRSS=509 php=1 phpRSS=200 ap=39 tcp=18 topuser=corpkicks 2026-08-15 07:04:45 L1=5.77 run=2 blk=0 avail=9121 (77.8%) swpO=0 conn=7 myRSS=509 php=1 phpRSS=111 ap=38 tcp=20 topuser=corpkicks 2026-08-15 07:04:54 L1=4.88 run=2 blk=0 avail=9265 (79.0%) swpO=0 conn=3 myRSS=509 php=0 phpRSS=0 ap=29 tcp=21 topuser=- 2026-08-15 07:04:55 L1=4.88 run=1 blk=0 avail=9274 (79.1%) swpO=0 conn=7 myRSS=509 php=0 phpRSS=0 ap=28 tcp=21 topuser=- 2026-08-15 07:05:04 L1=4.13 run=1 blk=0 avail=9319 (79.4%) swpO=0 conn=1 myRSS=509 php=0 phpRSS=0 ap=20 tcp=20 topuser=- 2026-08-15 07:05:05 L1=4.13 run=2 blk=0 avail=9328 (79.5%) swpO=0 conn=7 myRSS=509 php=0 phpRSS=0 ap=20 tcp=20 topuser=- 2026-08-15 07:05:14 L1=3.57 run=1 blk=0 avail=9337 (79.6%) swpO=0 conn=1 myRSS=509 php=0 phpRSS=0 ap=17 tcp=26 topuser=- 2026-08-15 07:05:15 L1=3.57 run=1 blk=1 avail=9336 (79.6%) swpO=0 conn=1 myRSS=509 php=0 phpRSS=0 ap=17 tcp=27 topuser=- 2026-08-15 07:05:24 L1=3.02 run=1 blk=0 avail=9346 (79.7%) swpO=0 conn=1 myRSS=510 php=0 phpRSS=0 ap=17 tcp=18 topuser=- 2026-08-15 07:05:25 L1=3.02 run=2 blk=0 avail=9346 (79.7%) swpO=0 conn=1 myRSS=510 php=0 phpRSS=0 ap=17 tcp=19 topuser=- 2026-08-15 07:05:34 L1=3.27 run=7 blk=0 avail=8848 (75.4%) swpO=0 conn=1 myRSS=511 php=8 phpRSS=729 ap=17 tcp=38 topuser=madalice 2026-08-15 07:05:35 L1=3.27 run=8 blk=0 avail=8422 (71.8%) swpO=0 conn=1 myRSS=511 php=8 phpRSS=1157 ap=18 tcp=36 topuser=madalice 2026-08-15 07:05:44 L1=4.84 run=20 blk=0 avail=7824 (66.7%) swpO=0 conn=1 myRSS=512 php=11 phpRSS=1454 ap=77 tcp=68 topuser=madalice 2026-08-15 07:05:45 L1=4.84 run=18 blk=0 avail=7026 (59.9%) swpO=0 conn=17 myRSS=512 php=16 phpRSS=2242 ap=76 tcp=70 topuser=madalice