INCIDENT 2026-08-19 04:56:08 trigger: php_rss=2022MB mysql_conn=15 ================================================================== load: 2.33 1.06 0.86 16/689 2206705 ncpu:10 mem_avail: 4574MB/11729MB (39.0%) swap_used:2271MB swapout:1598/s blocked(D):0 running:20 iowait:0.9% steal:0.0% php: 14 procs / 2022MB heaviest user: madalice (13 procs, 1862MB) apache: 76 procs tcp_estab: 72 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2408 madalice 13 2041 nobody 75 1229 root 244 938 mailman 20 369 netdata 8 254 infinium 3 184 kurri 7 80 cpanellogin 1 67 named 1 57 dovenull 6 23 lowrange 2 22 wp-toolkit 6 18 mailnull 1 17 zabbix 1 14 evolution 4 10 dovecot 3 6 nscd 1 4 cpanelconnecttrack 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 13 2068 infinium 1 160 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5018 MB Active(file): 2820 MB Inactive(file): 1189 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 482 MB CommitLimit: 9960 MB Committed_AS: 10025 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2064673 root 03:44:53 6624 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2463380 10.0 Ssl 3-21:05:32 /usr/sbin/mariadbd 2206612 2202444 madalice 214680 65.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206602 2202449 madalice 214496 66.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206613 2204532 madalice 210976 65.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 205952 2.5 Ssl 50-18:46:14 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2206619 2204471 madalice 198880 60.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206614 2206481 madalice 197900 59.6 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206620 2206480 madalice 195128 59.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206621 2204724 madalice 192524 85.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206618 2206293 madalice 189088 57.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206622 2206478 madalice 189084 84.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2122938 2112450 root 179124 0.0 S 02:17:40 spamd child 2122939 2112450 root 175408 0.0 S 02:17:40 spamd child 2206409 2206280 infinium 163976 92.5 R 00:16 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2206634 2206578 madalice 150804 61.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2112450 1 root 148148 0.0 Ss 02:32:36 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2206623 2204829 madalice 115896 45.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206626 2201489 madalice 108628 40.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2206639 2206579 madalice 91436 50.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 77756 0.0 Ss 3-21:05:35 /usr/lib/systemd/systemd-journald 2187501 1353308 cpanellogin 69296 0.0 S 30:44 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 2107664 1 named 59268 0.0 Ssl 02:33:28 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 2223 1201 root 45928 0.0 Sl 50-18:46:13 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42416 0.0 Ss 28-02:14:44 cpsrvd (SSL) - waiting for connections 1469 1 root 39660 0.1 Ss 50-18:46:13 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 32576 0.1 Sl 50-18:46:09 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2111676 1 root 29668 0.0 Ss 02:33:06 lfd - sleeping 1463 1 root 25296 0.0 Ss 50-18:46:13 tailwatchd 2111816 2111790 mailman 20088 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 2111818 2111790 mailman 20084 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 2111822 2111790 mailman 20084 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 2111819 2111790 mailman 20048 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 2111817 2111790 mailman 19956 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 2204510 1276780 nobody 19956 0.0 S 03:36 /usr/sbin/httpd -k start 2111821 2111790 mailman 19952 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 2111823 2111790 mailman 19936 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 2204861 1276780 nobody 19872 0.0 S 03:07 /usr/sbin/httpd -k start 2111808 2111790 mailman 19824 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:2 -s 2111812 2111790 mailman 19748 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 2111813 2111790 mailman 19696 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 2111809 2111790 mailman 19688 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 2111820 2111790 mailman 19672 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 2206478 1276780 nobody 19628 0.3 S 00:10 /usr/sbin/httpd -k start 2111811 2111790 mailman 19608 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 2111814 2111790 mailman 19608 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 2111825 2111790 mailman 19600 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 2111815 2111790 mailman 19548 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 2111810 2111790 mailman 19492 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 2111824 2111790 mailman 19368 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 2111807 2111790 mailman 19364 0.0 S 02:33:05 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s 2204532 1276780 nobody 18864 0.0 S 03:36 /usr/sbin/httpd -k start 2204829 1276780 nobody 18864 0.0 S 03:08 /usr/sbin/httpd -k start 2204724 1276780 nobody 18856 0.0 S 03:19 /usr/sbin/httpd -k start 2204830 1276780 nobody 18852 0.0 S 03:08 /usr/sbin/httpd -k start 2206480 1276780 nobody 18644 0.2 S 00:09 /usr/sbin/httpd -k start 2206481 1276780 nobody 18560 0.2 S 00:09 /usr/sbin/httpd -k start 2206542 1276780 nobody 18524 0.1 S 00:06 /usr/sbin/httpd -k start 2206293 1276780 nobody 18472 0.0 S 00:31 /usr/sbin/httpd -k start 2206540 1276780 nobody 18420 0.0 S 00:06 /usr/sbin/httpd -k start 2206558 1276780 nobody 18420 0.0 S 00:05 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10149403 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min kamcool/kamcool.com.au-ssl_log 31 evolution/portal.evolutionerp.com.au-ssl_log 24 madalice/madalice.com.au-ssl_log 12 evolution/my.evolutionerp.com.au-ssl_log 5 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 48 34.76.59.85 24 203.54.180.238 5 34.52.176.171 3 103.104.165.99 2 114.119.159.70 2 114.119.143.14 1 52.167.144.221 1 52.167.144.211 1 47.128.32.26 1 114.119.146.16 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 24 GET /heartbeat.php 5 GET / 3 GET /index.php 2 POST /functions.php 2 GET /wp-json 2 GET /store/custom-cowboys-kids/ 2 GET /rclone.conf 2 GET /Dockerfile 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /z9x8c7v6b5-debug-trigger-webmail.kamcool.com.au 1 GET /z9x8c7v6b5-debug-trigger-mail.madalice.com.au 1 GET /terraform.tfstate 1 GET /.svn/entries 1 GET /store/siy-custom-shoe-painting-kit/ 1 GET /store/honey-custom-af1-shoes-copy/ 1 GET /store/design-your-own-send-in/ 1 GET /store/custom-nike-af1-sunflower-kids/ 1 GET /store/custom-nike-af1-single-butterfly-swoosh-kids/ --- busiest 3 vhosts: top paths + last 10 requests --- == kamcool/kamcool.com.au-ssl_log == -- top paths -- 4 GET / 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /z9x8c7v6b5-debug-trigger-webmail.kamcool.com.au 1 GET /wp-json 1 GET /terraform.tfstate 1 GET /.svn/entries 1 GET /.ssh/known_hosts 1 GET /.ssh/id_rsa 1 GET /.ssh/id_ed25519 1 GET /.ssh/id_ecdsa -- last 10 requests -- 34.76.59.85 - - [19/Aug/2026:04:56:08 +1000] "GET /docker-compose.yaml HTTP/1.1" 404 3496 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:08 +1000] "GET /terraform.tfstate HTTP/1.1" 404 3496 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:08 +1000] "GET /.ssh/id_rsa HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:08 +1000] "GET /.ssh/id_ed25519 HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:08 +1000] "GET /.ssh/id_ecdsa HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:09 +1000] "GET /.ssh/id_dsa HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:09 +1000] "GET /.ssh/authorized_keys HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:09 +1000] "GET /.ssh/config HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:09 +1000] "GET /.ssh/known_hosts HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.76.59.85 - - [19/Aug/2026:04:56:09 +1000] "GET /id_rsa HTTP/1.1" 404 3496 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 24 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [19/Aug/2026:04:55:12 +1000] "GET /heartbeat.php?sentAt=1787079312&bytes=106,132,170,144&_=1787056650537 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:15 +1000] "GET /heartbeat.php?sentAt=1787079316&bytes=106,132,170,148&_=1787032956470 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:22 +1000] "GET /heartbeat.php?sentAt=1787079322&bytes=106,132,170,154&_=1787056650538 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:25 +1000] "GET /heartbeat.php?sentAt=1787079326&bytes=106,132,170,158&_=1787032956471 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:32 +1000] "GET /heartbeat.php?sentAt=1787079332&bytes=106,132,170,164&_=1787056650539 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:35 +1000] "GET /heartbeat.php?sentAt=1787079336&bytes=106,132,170,168&_=1787032956472 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:42 +1000] "GET /heartbeat.php?sentAt=1787079342&bytes=106,132,170,174&_=1787056650540 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:45 +1000] "GET /heartbeat.php?sentAt=1787079346&bytes=106,132,170,178&_=1787032956473 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:52 +1000] "GET /heartbeat.php?sentAt=1787079352&bytes=106,132,170,184&_=1787056650541 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [19/Aug/2026:04:55:55 +1000] "GET /heartbeat.php?sentAt=1787079356&bytes=106,132,170,188&_=1787032956474 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == madalice/madalice.com.au-ssl_log == -- top paths -- 2 GET /store/custom-cowboys-kids/ 1 GET /z9x8c7v6b5-debug-trigger-mail.madalice.com.au 1 GET /wp-json 1 GET /store/siy-custom-shoe-painting-kit/ 1 GET /store/honey-custom-af1-shoes-copy/ 1 GET /store/design-your-own-send-in/ 1 GET /store/custom-nike-af1-sunflower-kids/ 1 GET /store/custom-nike-af1-single-butterfly-swoosh-kids/ 1 GET /rclone.conf 1 GET /Dockerfile 1 GET / -- last 10 requests -- 114.119.143.14 - - [19/Aug/2026:04:54:52 +1000] "GET /store/custom-nike-af1-sunflower-kids/?image=1&wcpr_rating=3&wcpr_page=4 HTTP/1.1" 200 48229 "https://madalice.com.au/store/custom-nike-af1-sunflower-kids/?image=1&wcp 47.128.32.26 - - [19/Aug/2026:04:54:54 +1000] "GET /store/siy-custom-shoe-painting-kit/ HTTP/1.1" 404 30563 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; B 114.119.130.40 - - [19/Aug/2026:04:55:14 +1000] "GET /store/custom-nike-af1-single-butterfly-swoosh-kids/?wcpr_rating=1&wcpr_page=2&rating=2&wcpr_image=1 HTTP/1.1" 404 30594 "https://madalice.com.au/store/custom-nike-af1 114.119.159.70 - - [19/Aug/2026:04:55:35 +1000] "GET /store/custom-cowboys-kids/?amp%3Bverified=1&image=1&wcpr_rating=1 HTTP/1.1" 404 30579 "https://madalice.com.au/store/custom-cowboys-kids/?amp%3Bverified=1&image=1&wcp 34.52.176.171 - - [19/Aug/2026:04:55:54 +1000] "GET / HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 114.119.143.14 - - [19/Aug/2026:04:55:57 +1000] "GET /store/custom-cowboys-kids/?amp%3Bverified=1&image=1&rating=2 HTTP/1.1" 404 30575 "https://madalice.com.au/store/custom-cowboys-kids/?amp%3Bverified=1&image=1&verified 34.52.176.171 - - [19/Aug/2026:04:55:58 +1000] "GET /rclone.conf HTTP/1.1" 404 184494 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.52.176.171 - - [19/Aug/2026:04:55:58 +1000] "GET /z9x8c7v6b5-debug-trigger-mail.madalice.com.au HTTP/1.1" 404 184528 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.52.176.171 - - [19/Aug/2026:04:55:57 +1000] "GET /wp-json HTTP/1.1" 200 1333568 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.52.176.171 - - [19/Aug/2026:04:56:03 +1000] "GET /Dockerfile HTTP/1.1" 404 184493 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" --- last 30 samples (run-up to this incident) --- 2026-08-19 04:53:47 L1=0.67 run=2 blk=0 avail=6220 (53.0%) swpO=0 conn=1 myRSS=2431 php=1 phpRSS=69 ap=54 tcp=27 topuser=vinesit 2026-08-19 04:53:47 L1=0.67 run=5 blk=0 avail=6217 (53.0%) swpO=0 conn=1 myRSS=2431 php=1 phpRSS=71 ap=54 tcp=28 topuser=vinesit 2026-08-19 04:53:57 L1=0.64 run=1 blk=0 avail=6328 (54.0%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=44 tcp=23 topuser=- 2026-08-19 04:53:57 L1=0.64 run=2 blk=0 avail=6328 (53.9%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=44 tcp=23 topuser=- 2026-08-19 04:54:07 L1=0.54 run=1 blk=0 avail=6394 (54.5%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=34 tcp=25 topuser=- 2026-08-19 04:54:07 L1=0.54 run=2 blk=0 avail=6395 (54.5%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=34 tcp=25 topuser=- 2026-08-19 04:54:17 L1=0.46 run=2 blk=0 avail=6360 (54.2%) swpO=1 conn=1 myRSS=2431 php=2 phpRSS=178 ap=24 tcp=29 topuser=aaa 2026-08-19 04:54:17 L1=0.46 run=3 blk=0 avail=6357 (54.2%) swpO=1 conn=1 myRSS=2431 php=2 phpRSS=180 ap=24 tcp=29 topuser=aaa 2026-08-19 04:54:27 L1=0.39 run=1 blk=0 avail=6527 (55.7%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=15 tcp=26 topuser=- 2026-08-19 04:54:27 L1=0.39 run=2 blk=0 avail=6526 (55.6%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=15 tcp=26 topuser=- 2026-08-19 04:54:37 L1=0.33 run=1 blk=0 avail=6526 (55.6%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=15 tcp=26 topuser=- 2026-08-19 04:54:37 L1=0.33 run=2 blk=0 avail=6527 (55.7%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=15 tcp=26 topuser=- 2026-08-19 04:54:47 L1=0.28 run=1 blk=0 avail=6527 (55.7%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=15 tcp=25 topuser=- 2026-08-19 04:54:47 L1=0.28 run=3 blk=0 avail=6527 (55.7%) swpO=0 conn=1 myRSS=2431 php=0 phpRSS=0 ap=15 tcp=25 topuser=- 2026-08-19 04:54:57 L1=0.31 run=3 blk=0 avail=6386 (54.4%) swpO=0 conn=1 myRSS=2431 php=2 phpRSS=200 ap=15 tcp=28 topuser=infinium 2026-08-19 04:54:57 L1=0.31 run=3 blk=0 avail=6384 (54.4%) swpO=0 conn=3 myRSS=2431 php=2 phpRSS=202 ap=15 tcp=28 topuser=infinium 2026-08-19 04:55:07 L1=0.34 run=1 blk=0 avail=6426 (54.8%) swpO=0 conn=1 myRSS=2431 php=1 phpRSS=128 ap=15 tcp=23 topuser=infinium 2026-08-19 04:55:07 L1=0.34 run=4 blk=0 avail=6427 (54.8%) swpO=0 conn=3 myRSS=2431 php=1 phpRSS=128 ap=15 tcp=23 topuser=infinium 2026-08-19 04:55:17 L1=0.44 run=1 blk=1 avail=6418 (54.7%) swpO=0 conn=1 myRSS=2431 php=1 phpRSS=138 ap=15 tcp=23 topuser=infinium 2026-08-19 04:55:17 L1=0.44 run=2 blk=0 avail=6417 (54.7%) swpO=0 conn=3 myRSS=2431 php=1 phpRSS=138 ap=15 tcp=23 topuser=infinium 2026-08-19 04:55:28 L1=0.61 run=2 blk=0 avail=6404 (54.6%) swpO=0 conn=1 myRSS=2431 php=1 phpRSS=147 ap=15 tcp=27 topuser=infinium 2026-08-19 04:55:28 L1=0.61 run=3 blk=0 avail=6403 (54.6%) swpO=0 conn=3 myRSS=2431 php=1 phpRSS=147 ap=15 tcp=27 topuser=infinium 2026-08-19 04:55:38 L1=0.67 run=3 blk=0 avail=6168 (52.6%) swpO=0 conn=3 myRSS=2436 php=2 phpRSS=397 ap=17 tcp=27 topuser=madalice 2026-08-19 04:55:38 L1=0.67 run=3 blk=0 avail=6168 (52.6%) swpO=0 conn=3 myRSS=2436 php=2 phpRSS=397 ap=17 tcp=28 topuser=madalice 2026-08-19 04:55:48 L1=0.72 run=4 blk=0 avail=6379 (54.4%) swpO=0 conn=3 myRSS=2436 php=1 phpRSS=162 ap=16 tcp=24 topuser=infinium 2026-08-19 04:55:48 L1=0.72 run=4 blk=0 avail=6379 (54.4%) swpO=0 conn=3 myRSS=2436 php=1 phpRSS=162 ap=16 tcp=23 topuser=infinium 2026-08-19 04:55:58 L1=0.76 run=5 blk=0 avail=6308 (53.8%) swpO=0 conn=3 myRSS=2436 php=3 phpRSS=307 ap=15 tcp=30 topuser=infinium 2026-08-19 04:55:58 L1=0.76 run=5 blk=0 avail=6308 (53.8%) swpO=0 conn=4 myRSS=2436 php=3 phpRSS=307 ap=15 tcp=30 topuser=infinium 2026-08-19 04:56:08 L1=2.33 run=26 blk=0 avail=4614 (39.3%) swpO=1598 conn=15 myRSS=2409 php=14 phpRSS=1989 ap=76 tcp=73 topuser=madalice 2026-08-19 04:56:08 L1=2.33 run=20 blk=0 avail=4574 (39.0%) swpO=1598 conn=15 myRSS=2408 php=14 phpRSS=2022 ap=76 tcp=72 topuser=madalice