INCIDENT 2026-08-15 07:43:21 trigger: php_rss=2763MB mysql_conn=22 ================================================================== load: 3.10 2.62 6.04 25/641 2574152 ncpu:10 mem_avail: 7095MB/11729MB (60.5%) swap_used:1427MB swapout:0/s blocked(D):0 running:30 iowait:0.1% steal:0.0% php: 21 procs / 2763MB heaviest user: madalice (20 procs, 2723MB) apache: 52 procs tcp_estab: 117 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 20 2886 nobody 52 862 mysql 1 549 root 239 431 netdata 8 242 kurri 5 47 evolution 5 42 mailnull 4 39 wp-toolkit 6 22 mailman 20 19 dovenull 6 18 cpanellogin 1 16 zabbix 1 12 dovecot 3 8 dbus 1 3 polkitd 1 1 nscd 1 1 named 1 1 cpanelconnecttrack 1 1 rpc 1 0 --- php workers by user --- USER PROCS RSS_MB madalice 20 2916 evolution 1 39 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4028 MB Active(file): 1567 MB Inactive(file): 1228 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 217 MB CommitLimit: 9960 MB Committed_AS: 10741 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 06:32:06 120 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2561012 1 mysql 562576 3.3 Ssl 19:51 /usr/sbin/mariadbd 2574085 2573139 madalice 245436 45.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574086 2574062 madalice 224488 41.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574094 2571044 madalice 217252 58.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574047 2573952 madalice 214504 44.0 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574096 2573945 madalice 210436 64.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 192204 2.5 Ssl 46-21:33:24 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2574102 2574063 madalice 153592 49.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2390233 2382613 root 150832 0.0 S 05:07:44 spamd child 2574107 2574066 madalice 131752 52.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574104 2574067 madalice 107040 43.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574105 2574064 madalice 106392 40.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574114 2571794 madalice 106052 36.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574110 2573026 madalice 101904 33.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574112 2573953 madalice 99792 35.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574111 2574108 madalice 97700 34.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574116 2574016 madalice 91808 24.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574115 2571805 madalice 86168 25.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574117 2573951 madalice 81636 41.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574118 2573954 madalice 78728 39.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2382613 1 root 66172 0.0 Ss 05:20:10 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2574183 2573694 madalice 44412 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574182 2573989 madalice 44352 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574176 2573986 madalice 43076 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 41632 0.0 Ss 24-05:01:54 cpsrvd (SSL) - waiting for connections 2574122 2574120 evolution 40764 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 38228 0.1 Sl 46-21:33:19 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2574077 1 root 24516 1.8 S 00:05 /usr/sbin/exim -Mc 1wuzgI-0000000AnVc-10uc 2574090 2574077 mailnull 22472 0.2 S 00:04 /usr/sbin/exim -Mc 1wuzgI-0000000AnVc-10uc 2571044 1276780 nobody 22380 0.1 S 04:36 /usr/sbin/httpd -k start 2571825 1276780 nobody 21448 0.0 S 03:35 /usr/sbin/httpd -k start 2570991 1276780 nobody 21420 0.0 S 04:39 /usr/sbin/httpd -k start 2573129 1276780 nobody 21148 0.0 S 02:01 /usr/sbin/httpd -k start 2571754 1276780 nobody 20576 0.0 S 03:37 /usr/sbin/httpd -k start 2571821 1276780 nobody 20536 0.0 S 03:35 /usr/sbin/httpd -k start 159820 1 root 20236 0.0 Ss 25-21:56:32 /usr/lib/systemd/systemd-journald 2571794 1276780 nobody 20184 0.0 S 03:36 /usr/sbin/httpd -k start 2571805 1276780 nobody 19876 0.0 S 03:35 /usr/sbin/httpd -k start 2573025 1276780 nobody 19400 0.0 S 02:12 /usr/sbin/httpd -k start 2573665 1276780 nobody 18984 0.0 S 00:42 /usr/sbin/httpd -k start 2574106 2573129 nobody 18652 2.0 S 00:02 /usr/local/cpanel/cgi-sys/autodiscover.cgi 2573139 1276780 nobody 18592 0.0 S 01:58 /usr/sbin/httpd -k start 2573020 1276780 nobody 18500 0.0 S 02:13 /usr/sbin/httpd -k start 2573990 1276780 nobody 18116 0.3 S 00:10 /usr/sbin/httpd -k start 2574016 1276780 nobody 17936 0.1 S 00:07 /usr/sbin/httpd -k start 2573951 1276780 nobody 17932 0.2 S 00:11 /usr/sbin/httpd -k start 2573940 1276780 nobody 17916 0.2 S 00:13 /usr/sbin/httpd -k start 2573953 1276780 nobody 17808 0.1 S 00:11 /usr/sbin/httpd -k start 2573987 1276780 nobody 17792 0.0 S 00:10 /usr/sbin/httpd -k start 2574028 1276780 nobody 17768 0.0 S 00:06 /usr/sbin/httpd -k start 2573692 1276780 nobody 17500 0.0 S 00:40 /usr/sbin/httpd -k start 2573991 1276780 nobody 17396 0.2 S 00:10 /usr/sbin/httpd -k start 2573992 1276780 nobody 17348 0.2 S 00:10 /usr/sbin/httpd -k start 2573993 1276780 nobody 17344 0.3 S 00:10 /usr/sbin/httpd -k start 2573945 1276780 nobody 17336 0.2 S 00:12 /usr/sbin/httpd -k start 2573989 1276780 nobody 17272 0.2 S 00:10 /usr/sbin/httpd -k start 2573986 1276780 nobody 17264 0.2 S 00:10 /usr/sbin/httpd -k start 2574026 1276780 nobody 17264 0.1 S 00:06 /usr/sbin/httpd -k start 2574025 1276780 nobody 17196 0.1 S 00:06 /usr/sbin/httpd -k start 2573988 1276780 nobody 17176 0.2 S 00:10 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1606 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min aaa/aaadownunder.com.au-ssl_log 58 madalice/madalice.com.au-ssl_log 35 evolution/portal.evolutionerp.com.au-ssl_log 26 olympic/olympicfencing.com.au-ssl_log 21 alison/alisonarts.com.au-ssl_log 19 customc/customcentral.com.au-ssl_log 1 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 56 52.139.47.57 26 203.54.180.238 13 20.38.3.247 10 146.70.194.230 10 135.225.75.187 2 79.106.48.232 2 14.186.14.125 2 118.127.40.55 2 105.154.25.231 1 98.113.205.62 1 94.99.40.178 1 91.92.243.248 1 88.147.173.1 1 84.69.120.246 1 66.249.69.71 --- top request paths across all vhosts (last 3 min) --- 26 GET /heartbeat.php 5 POST / 5 GET / 3 POST //xmlrpc.php 2 POST /wp-cron.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /this_is_a_new_hello_world.php 2 GET /tag/football/ 2 GET /admin.php 2 GET /222.php 2 GET // 1 POST /wp-login.php 1 GET //xmlrpc.php 1 GET /wto.php 1 GET /wp-mail.php 1 GET //wp-json/wp/v2/users/ 1 GET //wp-includes/wlwmanifest.xml 1 GET /wp-includes/style-engine/ 1 GET /wp-includes/rest-api/endpoints/ 1 GET /wp-includes/rest-api/ --- busiest 3 vhosts: top paths + last 10 requests --- == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 1 POST /wp-login.php 1 POST /wp-cron.php 1 GET /wp-mail.php 1 GET /wp-includes/style-engine/ 1 GET /wp-includes/rest-api/endpoints/ 1 GET /wp-includes/rest-api/ 1 GET /wp-includes/fonts/index.php 1 GET /wp-includes/assets/ 1 GET /w.php 1 GET /wp-content/themes/admin.php 1 GET /wp-content/themes/ 1 GET /wp-content/plugins/admin.php -- last 10 requests -- 52.139.47.57 - - [15/Aug/2026:07:41:25 +1000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:25 +1000] "GET /wp-content/themes/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:25 +1000] "GET /wp-content/themes/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:25 +1000] "GET /wp-includes/assets/ HTTP/1.1" 200 351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:26 +1000] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:26 +1000] "GET /wp-includes/rest-api/ HTTP/1.1" 200 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:26 +1000] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 200 936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:26 +1000] "GET /wp-includes/style-engine/ HTTP/1.1" 200 369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:07:41:26 +1000] "GET /wp-mail.php HTTP/1.1" 403 876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.92.243.248 - - [15/Aug/2026:07:41:27 +1000] "POST /wp-login.php HTTP/1.1" 200 6202 "-" "Mozilla/5.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 5 POST / 2 GET /tag/football/ 2 GET / 1 GET /tag/unleash-your-style/ 1 GET /tag/transformers/ 1 GET /tag/tigger/ 1 GET /tag/textastyle/ 1 GET /tag/slides/ 1 GET /tag/roses/ 1 GET /tag/purple/ 1 GET /tag/pot/ 1 GET /tag/pixel/ -- last 10 requests -- 45.226.227.232 - - [15/Aug/2026:07:43:17 +1000] "GET /tag/asics/ HTTP/1.1" 200 29724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 80.230.183.59 - - [15/Aug/2026:07:43:16 +1000] "GET /tag/slides/ HTTP/1.1" 200 29492 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 123.253.95.190 - - [15/Aug/2026:07:43:17 +1000] "GET /tag/cars/ HTTP/1.1" 200 29226 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 190.115.193.216 - - [15/Aug/2026:07:43:16 +1000] "GET /store/monsters-custom-af1/ HTTP/1.1" 200 46048 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/53 189.113.177.149 - - [15/Aug/2026:07:43:21 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 400 - "https://madalice.com.au/tag/textastyle/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTM 47.82.201.233 - - [15/Aug/2026:07:43:17 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/tag/glitter/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KH 46.185.232.29 - - [15/Aug/2026:07:43:22 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 400 - "https://madalice.com.au/tag/kicks/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like 31.146.38.38 - - [15/Aug/2026:07:43:17 +1000] "GET /tag/handpainted/ HTTP/1.1" 200 29178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 187.85.16.97 - - [15/Aug/2026:07:43:18 +1000] "GET /tag/pixel/ HTTP/1.1" 200 29103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 181.174.231.26 - - [15/Aug/2026:07:43:16 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/tag/football/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [15/Aug/2026:07:42:23 +1000] "GET /heartbeat.php?sentAt=1786743743&bytes=106,127,139,191&_=1786683795424 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:25 +1000] "GET /heartbeat.php?sentAt=1786743746&bytes=106,127,139,194&_=1786712385392 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:33 +1000] "GET /heartbeat.php?sentAt=1786743753&bytes=106,127,139,201&_=1786683795425 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:35 +1000] "GET /heartbeat.php?sentAt=1786743756&bytes=106,127,139,204&_=1786712385393 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:43 +1000] "GET /heartbeat.php?sentAt=1786743763&bytes=106,127,139,211&_=1786683795426 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:45 +1000] "GET /heartbeat.php?sentAt=1786743766&bytes=106,127,139,214&_=1786712385394 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:53 +1000] "GET /heartbeat.php?sentAt=1786743773&bytes=106,127,139,221&_=1786683795427 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:42:55 +1000] "GET /heartbeat.php?sentAt=1786743776&bytes=106,127,139,224&_=1786712385395 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:43:03 +1000] "GET /heartbeat.php?sentAt=1786743783&bytes=106,127,139,231&_=1786683795428 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:43:05 +1000] "GET /heartbeat.php?sentAt=1786743786&bytes=106,127,139,234&_=1786712385396 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-15 07:40:56 L1=3.73 run=2 blk=0 avail=9435 (80.4%) swpO=0 conn=26 myRSS=546 php=1 phpRSS=39 ap=19 tcp=20 topuser=evolution 2026-08-15 07:41:00 L1=3.51 run=1 blk=0 avail=9445 (80.5%) swpO=0 conn=15 myRSS=546 php=0 phpRSS=0 ap=18 tcp=20 topuser=- 2026-08-15 07:41:06 L1=3.23 run=2 blk=0 avail=9181 (78.3%) swpO=0 conn=26 myRSS=546 php=3 phpRSS=368 ap=16 tcp=24 topuser=customc 2026-08-15 07:41:10 L1=3.21 run=1 blk=0 avail=9443 (80.5%) swpO=0 conn=15 myRSS=546 php=0 phpRSS=0 ap=19 tcp=24 topuser=- 2026-08-15 07:41:16 L1=2.95 run=2 blk=0 avail=9392 (80.1%) swpO=0 conn=3 myRSS=546 php=2 phpRSS=110 ap=19 tcp=26 topuser=customc 2026-08-15 07:41:20 L1=2.79 run=2 blk=0 avail=9321 (79.5%) swpO=0 conn=2 myRSS=546 php=1 phpRSS=148 ap=19 tcp=28 topuser=alison 2026-08-15 07:41:26 L1=2.57 run=1 blk=0 avail=9418 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=21 tcp=24 topuser=evolution 2026-08-15 07:41:30 L1=2.36 run=1 blk=0 avail=9423 (80.3%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=21 tcp=25 topuser=- 2026-08-15 07:41:36 L1=2.25 run=2 blk=0 avail=9330 (79.5%) swpO=0 conn=3 myRSS=546 php=2 phpRSS=149 ap=22 tcp=25 topuser=madalice 2026-08-15 07:41:40 L1=2.07 run=1 blk=0 avail=9424 (80.3%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=22 tcp=22 topuser=- 2026-08-15 07:41:46 L1=1.91 run=1 blk=0 avail=9419 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=21 tcp=21 topuser=evolution 2026-08-15 07:41:50 L1=1.83 run=1 blk=0 avail=9439 (80.5%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=20 tcp=20 topuser=- 2026-08-15 07:41:56 L1=1.69 run=2 blk=0 avail=9428 (80.4%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=19 tcp=21 topuser=evolution 2026-08-15 07:42:00 L1=1.63 run=1 blk=0 avail=9438 (80.5%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=19 tcp=21 topuser=- 2026-08-15 07:42:06 L1=1.58 run=3 blk=0 avail=9421 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=19 tcp=22 topuser=evolution 2026-08-15 07:42:10 L1=1.45 run=1 blk=0 avail=9472 (80.8%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=19 tcp=18 topuser=- 2026-08-15 07:42:16 L1=1.34 run=2 blk=0 avail=9457 (80.6%) swpO=0 conn=2 myRSS=546 php=1 phpRSS=40 ap=19 tcp=20 topuser=evolution 2026-08-15 07:42:20 L1=1.23 run=1 blk=0 avail=9483 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=17 tcp=19 topuser=- 2026-08-15 07:42:26 L1=1.29 run=3 blk=0 avail=9291 (79.2%) swpO=0 conn=2 myRSS=546 php=3 phpRSS=285 ap=17 tcp=22 topuser=olympic 2026-08-15 07:42:30 L1=1.27 run=2 blk=0 avail=9490 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-15 07:42:36 L1=1.17 run=2 blk=0 avail=9429 (80.4%) swpO=0 conn=2 myRSS=546 php=2 phpRSS=117 ap=17 tcp=21 topuser=olympic 2026-08-15 07:42:40 L1=1.23 run=2 blk=0 avail=9484 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=18 tcp=19 topuser=- 2026-08-15 07:42:46 L1=1.13 run=1 blk=0 avail=9460 (80.7%) swpO=0 conn=2 myRSS=546 php=2 phpRSS=69 ap=21 tcp=20 topuser=evolution 2026-08-15 07:42:50 L1=1.04 run=1 blk=0 avail=9467 (80.7%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:42:56 L1=1.04 run=2 blk=0 avail=9420 (80.3%) swpO=0 conn=2 myRSS=547 php=1 phpRSS=40 ap=20 tcp=24 topuser=evolution 2026-08-15 07:43:00 L1=0.96 run=1 blk=0 avail=9430 (80.4%) swpO=0 conn=1 myRSS=547 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:43:06 L1=0.88 run=1 blk=0 avail=9424 (80.3%) swpO=0 conn=2 myRSS=547 php=1 phpRSS=40 ap=19 tcp=24 topuser=evolution 2026-08-15 07:43:10 L1=1.37 run=10 blk=0 avail=8623 (73.5%) swpO=0 conn=1 myRSS=547 php=7 phpRSS=988 ap=26 tcp=41 topuser=madalice 2026-08-15 07:43:16 L1=1.98 run=12 blk=0 avail=8535 (72.8%) swpO=0 conn=11 myRSS=549 php=11 phpRSS=1078 ap=41 tcp=85 topuser=madalice 2026-08-15 07:43:21 L1=3.10 run=30 blk=0 avail=7095 (60.5%) swpO=0 conn=22 myRSS=549 php=21 phpRSS=2763 ap=52 tcp=117 topuser=madalice