INCIDENT 2026-08-15 07:44:26 trigger: mem_avail=0.4% load=95.66/10cpu blocked=30 swapout=16065/s php_procs=102 php_rss=4390MB ================================================================== load: 308.33 209.32 100.06 151/933 2575458 ncpu:10 mem_avail: 41MB/11729MB (0.4%) swap_used:4095MB swapout:16065/s blocked(D):30 running:224 iowait:4.0% steal:0.0% php: 102 procs / 4390MB heaviest user: madalice (101 procs, 4365MB) apache: 149 procs tcp_estab: 96 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 108 5669 nobody 195 1506 root 314 972 netdata 8 156 mailman 20 25 mailnull 4 17 zabbix 1 13 wp-toolkit 6 10 dovenull 6 10 dovecot 3 8 dbus 1 3 polkitd 1 2 cpanelphpmyadmin 1 2 cpanelconnecttrack 1 2 named 1 1 kurri 4 1 cpanellogin 1 1 rpc 1 0 nscd 1 0 evolution 4 0 madalice 108 5671 nobody 195 1508 root 318 992 netdata 8 156 mailman 20 25 mailnull 4 17 zabbix 1 13 wp-toolkit 6 10 dovenull 6 10 dovecot 3 8 dbus 1 3 polkitd 1 2 cpanelphpmyadmin 1 2 cpanelconnecttrack 1 2 named 1 1 kurri 4 1 cpanellogin 1 1 rpc 1 0 nscd 1 0 evolution 4 0 --- php workers by user --- USER PROCS RSS_MB --- php workers by user --- USER PROCS RSS_MB madalice 107 5684 --- vm tuning / memory pressure --- madalice 107 5686 --- vm tuning / memory pressure --- vm.swappiness 30 vm.swappiness 30 vm.vfs_cache_pressure 100 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6207 MB Active(file): 131 MB Inactive(file): 118 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 134 MB CommitLimit: 9960 MB Committed_AS: 28122 MB --- backup / dump / scan processes (page-cache evictors) --- vm.overcommit_ratio 50 Cached: 6139 MB Active(file): 152 MB Inactive(file): 106 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 134 MB CommitLimit: 9960 MB Committed_AS: 26658 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 06:39:23 0 /usr/bin/imunify-agent-proxy 2575381 root 00:02 1212 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1220 1 netdata 130048 2.5 Ssl 46-21:40:41 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2574565 2574409 madalice 119812 1.7 D 07:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574605 2574460 madalice 98396 0.8 D 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574559 2573020 madalice 92656 3.0 S 07:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574410 2574300 madalice 84340 3.1 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574443 2573665 madalice 82900 1.0 D 07:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574510 2574062 madalice 82544 3.4 S 07:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2390233 2382613 root 78792 0.0 S 05:15:01 spamd child 2574589 2573946 madalice 73636 2.5 D 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574736 2574064 madalice 72608 2.3 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574756 2574747 madalice 69640 3.0 S 07:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574405 2574298 madalice 69448 2.6 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574526 2573945 madalice 68048 3.3 S 07:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574421 2573692 madalice 66252 3.6 R 07:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574612 2574599 madalice 66028 3.2 S 07:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574609 2574601 madalice 65340 3.6 S 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574713 2573987 madalice 64800 3.3 S 07:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574734 2574552 madalice 62504 0.8 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575121 2574630 madalice 62488 2.1 R 00:44 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574738 2574627 madalice 61716 3.8 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574390 2574017 madalice 61608 3.5 D 07:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574741 2574626 madalice 61496 3.1 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574497 2573988 madalice 61424 1.6 S 07:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574811 2574799 madalice 61072 3.0 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574837 2574628 madalice 61052 3.2 S 06:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574370 2571044 madalice 60956 2.5 S 07:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574731 2574625 madalice 60260 2.9 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574806 2574800 madalice 59924 3.2 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574796 2574225 madalice 59708 3.2 S 07:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574700 2571794 madalice 58916 3.3 D 07:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574835 2574293 madalice 58860 3.3 S 06:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575290 2574709 madalice 58640 4.0 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574732 2573989 madalice 57952 3.3 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575115 2574226 madalice 57736 1.9 R 00:53 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574633 2571805 madalice 57572 3.3 S 07:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574610 2574600 madalice 57304 0.7 S 07:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574406 2574297 madalice 56508 2.0 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574516 2574294 madalice 56472 1.8 S 07:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574757 2574748 madalice 56256 2.9 S 07:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574636 2574629 madalice 55960 2.9 S 07:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574607 2574598 madalice 55904 0.9 S 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575134 2574065 madalice 55140 4.5 R 00:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575240 2574625 madalice 53768 3.8 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575326 2574801 madalice 53712 6.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574579 2573993 madalice 53100 2.5 S 07:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574260 2573992 madalice 52924 1.1 S 07:16 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575204 2574826 madalice 52800 2.8 R 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574710 2574624 madalice 52560 3.3 S 07:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574735 2574068 madalice 52056 2.8 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574813 2574295 madalice 51632 1.6 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574688 2574459 madalice 51292 3.3 S 07:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574555 2574065 madalice 50396 3.2 S 07:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574739 2573954 madalice 50364 1.7 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574833 2574801 madalice 49508 0.6 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574880 2574864 madalice 49440 2.8 S 06:54 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574542 2574458 madalice 49436 1.7 D 07:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574412 2574296 madalice 49360 3.1 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574261 2573139 madalice 49244 3.3 D 07:16 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574815 2574299 madalice 48880 0.7 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574637 2574028 madalice 48868 2.5 S 07:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 06:39:23 0 /usr/bin/imunify-agent-proxy 2575381 root 00:02 1212 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- 835 Ds - /usr/lib/systemd/systemd-logind 1574 Ds - /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2223 Dl - /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1601939 D - cPhulkd - dbprocessor 2570991 D - /usr/sbin/httpd -k start 2573129 D - /usr/sbin/httpd -k start 2574065 D - /usr/sbin/httpd -k start 2574261 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574390 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574421 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574443 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574523 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574539 D - sw-engine-fpm: pool wordpress-toolkit 2574542 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574548 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574556 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574565 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574576 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574589 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574592 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574605 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574625 D - /usr/sbin/httpd -k start 2574630 D - /usr/sbin/httpd -k start 2574956 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575013 D - /usr/local/cpanel/libexec/cphulkd 2575018 D - lfd - child closing 2575097 D - /usr/sbin/httpd -k start 2575102 D - /usr/sbin/httpd -k start 2575107 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575108 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1220 1 netdata 130572 2.5 Ssl 46-21:40:41 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2574565 2574409 madalice 121836 1.7 D 07:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574605 2574460 madalice 99084 0.8 R 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574559 2573020 madalice 92656 3.0 S 07:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574410 2574300 madalice 84340 3.1 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574443 2573665 madalice 83516 1.0 D 07:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574510 2574062 madalice 82544 3.4 S 07:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2390233 2382613 root 78792 0.0 S 05:15:01 spamd child 2574736 2574064 madalice 72608 2.3 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574589 2573946 madalice 72492 2.5 R 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574756 2574747 madalice 69640 3.0 S 07:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574405 2574298 madalice 69448 2.6 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574526 2573945 madalice 68048 3.3 S 07:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574421 2573692 madalice 66376 3.6 D 07:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574612 2574599 madalice 66028 3.2 S 07:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574609 2574601 madalice 65340 3.6 S 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574713 2573987 madalice 64800 3.3 S 07:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574390 2574017 madalice 62892 3.5 D 07:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574734 2574552 madalice 62504 0.8 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574738 2574627 madalice 61716 3.8 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574741 2574626 madalice 61496 3.1 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574497 2573988 madalice 61424 1.6 S 07:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574811 2574799 madalice 61072 3.0 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574837 2574628 madalice 61052 3.2 S 06:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574370 2571044 madalice 60956 2.5 S 07:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574592 2574067 madalice 60912 2.2 D 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574731 2574625 madalice 60260 2.9 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574806 2574800 madalice 59924 3.2 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574796 2574225 madalice 59708 3.2 S 07:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574700 2571794 madalice 59032 3.3 D 07:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574835 2574293 madalice 58860 3.3 S 06:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574732 2573989 madalice 57952 3.3 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574633 2571805 madalice 57572 3.3 S 07:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574610 2574600 madalice 57304 0.7 S 07:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574406 2574297 madalice 56508 2.0 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574516 2574294 madalice 56472 1.8 S 07:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574757 2574748 madalice 56256 2.9 S 07:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574636 2574629 madalice 55960 2.9 S 07:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574607 2574598 madalice 55904 0.9 S 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575290 2574709 madalice 54804 4.6 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574579 2573993 madalice 53100 2.5 S 07:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574260 2573992 madalice 52924 1.1 S 07:16 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574710 2574624 madalice 52560 3.3 S 07:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574735 2574068 madalice 52056 2.8 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574813 2574295 madalice 51632 1.6 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574688 2574459 madalice 51292 3.3 S 07:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574555 2574065 madalice 50396 3.2 S 07:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574739 2573954 madalice 50364 1.7 S 07:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574542 2574458 madalice 49588 1.7 D 07:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574833 2574801 madalice 49508 0.6 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574261 2573139 madalice 49472 3.3 D 07:16 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574880 2574864 madalice 49440 2.8 S 06:54 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574412 2574296 madalice 49360 3.1 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574815 2574299 madalice 48880 0.7 S 07:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574637 2574028 madalice 48868 2.5 S 07:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574582 2574577 madalice 48720 0.7 S 07:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574414 2574027 madalice 48664 2.3 D 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574415 2574025 madalice 48468 3.3 S 07:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574523 2574108 madalice 46844 3.5 D 07:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574855 2574828 madalice 46676 2.8 S 06:57 /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 1601939 D - cPhulkd - dbprocessor 2570991 D - /usr/sbin/httpd -k start 2573129 D - /usr/sbin/httpd -k start 2574390 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574443 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574523 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574539 D - sw-engine-fpm: pool wordpress-toolkit 2574542 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574556 D page_wait_table /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574565 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574576 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574586 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574589 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574592 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574605 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574630 D - /usr/sbin/httpd -k start 2574700 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2574709 D - /usr/sbin/httpd -k start 2575013 D - /usr/local/cpanel/libexec/cphulkd 2575018 D - lfd - child closing 2575097 D - /usr/sbin/httpd -k start 2575102 D - /usr/sbin/httpd -k start 2575109 D - /usr/sbin/httpd -k start 2575111 D - /usr/sbin/httpd -k start 2575116 D - /usr/sbin/httpd -k start 2575117 D - /usr/sbin/httpd -k start 2575118 D - /usr/sbin/httpd -k start 2575119 D - /usr/sbin/httpd -k start 2575122 D - /usr/sbin/httpd -k start 2575123 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- ERRORERROR 2002 (HY000) 2002 (HY000): Can't connect to local server through socket '/var/lib/mysql/mysql.sock' (111) : Can't connect to local server through socket '/var/lib/mysql/mysql.sock' (111) --- lock waits --- --- lock waits --- ERROR 2002 (HY000): Can't connect to local server through socket '/var/lib/mysql/mysql.sock' (111) ERROR 2002 (HY000): Can't connect to local server through socket '/var/lib/mysql/mysql.sock' (111) --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min VHOST LOG REQ/3min (total vhosts taking traffic: 0) --- top client IPs across all vhosts (last 3 min) --- (total vhosts taking traffic: 0) --- top client IPs across all vhosts (last 3 min) --- --- top request paths across all vhosts (last 3 min) --- --- top request paths across all vhosts (last 3 min) --- --- busiest 3 vhosts: top paths + last 10 requests --- --- last 30 samples (run-up to this incident) --- 2026-08-15 07:41:30 L1=2.36 run=1 blk=0 avail=9423 (80.3%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=21 tcp=25 topuser=- 2026-08-15 07:41:36 L1=2.25 run=2 blk=0 avail=9330 (79.5%) swpO=0 conn=3 myRSS=546 php=2 phpRSS=149 ap=22 tcp=25 topuser=madalice 2026-08-15 07:41:40 L1=2.07 run=1 blk=0 avail=9424 (80.3%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=22 tcp=22 topuser=- 2026-08-15 07:41:46 L1=1.91 run=1 blk=0 avail=9419 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=21 tcp=21 topuser=evolution 2026-08-15 07:41:50 L1=1.83 run=1 blk=0 avail=9439 (80.5%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=20 tcp=20 topuser=- 2026-08-15 07:41:56 L1=1.69 run=2 blk=0 avail=9428 (80.4%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=19 tcp=21 topuser=evolution 2026-08-15 07:42:00 L1=1.63 run=1 blk=0 avail=9438 (80.5%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=19 tcp=21 topuser=- 2026-08-15 07:42:06 L1=1.58 run=3 blk=0 avail=9421 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=19 tcp=22 topuser=evolution 2026-08-15 07:42:10 L1=1.45 run=1 blk=0 avail=9472 (80.8%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=19 tcp=18 topuser=- 2026-08-15 07:42:16 L1=1.34 run=2 blk=0 avail=9457 (80.6%) swpO=0 conn=2 myRSS=546 php=1 phpRSS=40 ap=19 tcp=20 topuser=evolution 2026-08-15 07:42:20 L1=1.23 run=1 blk=0 avail=9483 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=17 tcp=19 topuser=- 2026-08-15 07:42:26 L1=1.29 run=3 blk=0 avail=9291 (79.2%) swpO=0 conn=2 myRSS=546 php=3 phpRSS=285 ap=17 tcp=22 topuser=olympic 2026-08-15 07:42:30 L1=1.27 run=2 blk=0 avail=9490 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-15 07:42:36 L1=1.17 run=2 blk=0 avail=9429 (80.4%) swpO=0 conn=2 myRSS=546 php=2 phpRSS=117 ap=17 tcp=21 topuser=olympic 2026-08-15 07:42:40 L1=1.23 run=2 blk=0 avail=9484 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=18 tcp=19 topuser=- 2026-08-15 07:42:46 L1=1.13 run=1 blk=0 avail=9460 (80.7%) swpO=0 conn=2 myRSS=546 php=2 phpRSS=69 ap=21 tcp=20 topuser=evolution 2026-08-15 07:42:50 L1=1.04 run=1 blk=0 avail=9467 (80.7%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:42:56 L1=1.04 run=2 blk=0 avail=9420 (80.3%) swpO=0 conn=2 myRSS=547 php=1 phpRSS=40 ap=20 tcp=24 topuser=evolution 2026-08-15 07:43:00 L1=0.96 run=1 blk=0 avail=9430 (80.4%) swpO=0 conn=1 myRSS=547 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:43:06 L1=0.88 run=1 blk=0 avail=9424 (80.3%) swpO=0 conn=2 myRSS=547 php=1 phpRSS=40 ap=19 tcp=24 topuser=evolution 2026-08-15 07:43:10 L1=1.37 run=10 blk=0 avail=8623 (73.5%) swpO=0 conn=1 myRSS=547 php=7 phpRSS=988 ap=26 tcp=41 topuser=madalice 2026-08-15 07:43:16 L1=1.98 run=12 blk=0 avail=8535 (72.8%) swpO=0 conn=11 myRSS=549 php=11 phpRSS=1078 ap=41 tcp=85 topuser=madalice 2026-08-15 07:43:21 L1=3.10 run=30 blk=0 avail=7095 (60.5%) swpO=0 conn=22 myRSS=549 php=21 phpRSS=2763 ap=52 tcp=117 topuser=madalice 2026-08-15 07:43:27 L1=5.50 run=54 blk=0 avail=4744 (40.4%) swpO=0 conn=40 myRSS=551 php=44 phpRSS=5517 ap=71 tcp=155 topuser=madalice 2026-08-15 07:43:34 L1=10.34 run=68 blk=0 avail=2706 (23.1%) swpO=38 conn=58 myRSS=558 php=59 phpRSS=7958 ap=87 tcp=186 topuser=madalice 2026-08-15 07:43:37 L1=15.36 run=79 blk=0 avail=1634 (13.9%) swpO=505 conn=67 myRSS=561 php=74 phpRSS=9131 ap=89 tcp=172 topuser=madalice 2026-08-15 07:43:44 L1=27.28 run=69 blk=24 avail=383 (3.3%) swpO=15506 conn=79 myRSS=563 php=85 phpRSS=11291 ap=108 tcp=156 topuser=madalice 2026-08-15 07:43:48 L1=27.28 run=20 blk=81 avail=259 (2.2%) swpO=42058 conn=85 myRSS=532 php=90 phpRSS=11353 ap=119 tcp=154 topuser=madalice 2026-08-15 07:44:28 L1=104.09 run=226 blk=2 avail=54 (0.5%) swpO=8286 conn=- myRSS=0 php=101 phpRSS=4346 ap=149 tcp=96 topuser=madalice 2026-08-15 07:44:26 L1=95.66 run=224 blk=30 avail=41 (0.4%) swpO=16065 conn=- myRSS=0 php=102 phpRSS=4390 ap=149 tcp=96 topuser=madalice --- busiest 3 vhosts: top paths + last 10 requests --- --- last 30 samples (run-up to this incident) --- 2026-08-15 07:41:30 L1=2.36 run=1 blk=0 avail=9423 (80.3%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=21 tcp=25 topuser=- 2026-08-15 07:41:36 L1=2.25 run=2 blk=0 avail=9330 (79.5%) swpO=0 conn=3 myRSS=546 php=2 phpRSS=149 ap=22 tcp=25 topuser=madalice 2026-08-15 07:41:40 L1=2.07 run=1 blk=0 avail=9424 (80.3%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=22 tcp=22 topuser=- 2026-08-15 07:41:46 L1=1.91 run=1 blk=0 avail=9419 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=21 tcp=21 topuser=evolution 2026-08-15 07:41:50 L1=1.83 run=1 blk=0 avail=9439 (80.5%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=20 tcp=20 topuser=- 2026-08-15 07:41:56 L1=1.69 run=2 blk=0 avail=9428 (80.4%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=19 tcp=21 topuser=evolution 2026-08-15 07:42:00 L1=1.63 run=1 blk=0 avail=9438 (80.5%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=19 tcp=21 topuser=- 2026-08-15 07:42:06 L1=1.58 run=3 blk=0 avail=9421 (80.3%) swpO=0 conn=3 myRSS=546 php=1 phpRSS=40 ap=19 tcp=22 topuser=evolution 2026-08-15 07:42:10 L1=1.45 run=1 blk=0 avail=9472 (80.8%) swpO=0 conn=2 myRSS=546 php=0 phpRSS=0 ap=19 tcp=18 topuser=- 2026-08-15 07:42:16 L1=1.34 run=2 blk=0 avail=9457 (80.6%) swpO=0 conn=2 myRSS=546 php=1 phpRSS=40 ap=19 tcp=20 topuser=evolution 2026-08-15 07:42:20 L1=1.23 run=1 blk=0 avail=9483 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=17 tcp=19 topuser=- 2026-08-15 07:42:26 L1=1.29 run=3 blk=0 avail=9291 (79.2%) swpO=0 conn=2 myRSS=546 php=3 phpRSS=285 ap=17 tcp=22 topuser=olympic 2026-08-15 07:42:30 L1=1.27 run=2 blk=0 avail=9490 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-15 07:42:36 L1=1.17 run=2 blk=0 avail=9429 (80.4%) swpO=0 conn=2 myRSS=546 php=2 phpRSS=117 ap=17 tcp=21 topuser=olympic 2026-08-15 07:42:40 L1=1.23 run=2 blk=0 avail=9484 (80.9%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=18 tcp=19 topuser=- 2026-08-15 07:42:46 L1=1.13 run=1 blk=0 avail=9460 (80.7%) swpO=0 conn=2 myRSS=546 php=2 phpRSS=69 ap=21 tcp=20 topuser=evolution 2026-08-15 07:42:50 L1=1.04 run=1 blk=0 avail=9467 (80.7%) swpO=0 conn=1 myRSS=546 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:42:56 L1=1.04 run=2 blk=0 avail=9420 (80.3%) swpO=0 conn=2 myRSS=547 php=1 phpRSS=40 ap=20 tcp=24 topuser=evolution 2026-08-15 07:43:00 L1=0.96 run=1 blk=0 avail=9430 (80.4%) swpO=0 conn=1 myRSS=547 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:43:06 L1=0.88 run=1 blk=0 avail=9424 (80.3%) swpO=0 conn=2 myRSS=547 php=1 phpRSS=40 ap=19 tcp=24 topuser=evolution 2026-08-15 07:43:10 L1=1.37 run=10 blk=0 avail=8623 (73.5%) swpO=0 conn=1 myRSS=547 php=7 phpRSS=988 ap=26 tcp=41 topuser=madalice 2026-08-15 07:43:16 L1=1.98 run=12 blk=0 avail=8535 (72.8%) swpO=0 conn=11 myRSS=549 php=11 phpRSS=1078 ap=41 tcp=85 topuser=madalice 2026-08-15 07:43:21 L1=3.10 run=30 blk=0 avail=7095 (60.5%) swpO=0 conn=22 myRSS=549 php=21 phpRSS=2763 ap=52 tcp=117 topuser=madalice 2026-08-15 07:43:27 L1=5.50 run=54 blk=0 avail=4744 (40.4%) swpO=0 conn=40 myRSS=551 php=44 phpRSS=5517 ap=71 tcp=155 topuser=madalice 2026-08-15 07:43:34 L1=10.34 run=68 blk=0 avail=2706 (23.1%) swpO=38 conn=58 myRSS=558 php=59 phpRSS=7958 ap=87 tcp=186 topuser=madalice 2026-08-15 07:43:37 L1=15.36 run=79 blk=0 avail=1634 (13.9%) swpO=505 conn=67 myRSS=561 php=74 phpRSS=9131 ap=89 tcp=172 topuser=madalice 2026-08-15 07:43:44 L1=27.28 run=69 blk=24 avail=383 (3.3%) swpO=15506 conn=79 myRSS=563 php=85 phpRSS=11291 ap=108 tcp=156 topuser=madalice 2026-08-15 07:43:48 L1=27.28 run=20 blk=81 avail=259 (2.2%) swpO=42058 conn=85 myRSS=532 php=90 phpRSS=11353 ap=119 tcp=154 topuser=madalice 2026-08-15 07:44:28 L1=104.09 run=226 blk=2 avail=54 (0.5%) swpO=8286 conn=- myRSS=0 php=101 phpRSS=4346 ap=149 tcp=96 topuser=madalice 2026-08-15 07:44:26 L1=95.66 run=224 blk=30 avail=41 (0.4%) swpO=16065 conn=- myRSS=0 php=102 phpRSS=4390 ap=149 tcp=96 topuser=madalice