INCIDENT 2026-08-23 13:33:33 trigger: php_rss=1722MB mysql_conn=23 ================================================================== load: 4.04 2.42 1.44 26/688 2602376 ncpu:10 mem_avail: 5241MB/11729MB (44.7%) swap_used:3561MB swapout:0/s blocked(D):0 running:30 iowait:0.0% steal:0.0% php: 24 procs / 1722MB heaviest user: infinium (23 procs, 1662MB) apache: 54 procs tcp_estab: 66 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2666 infinium 25 1876 root 240 1011 nobody 53 834 netdata 8 259 mailman 20 93 cpanellogin 1 66 olympic 1 65 mailnull 3 59 kurri 3 34 dovenull 6 27 evolution 8 25 wp-toolkit 6 19 zabbix 1 16 named 1 12 aaa 1 12 kamcool 1 11 nscd 1 7 dovecot 3 7 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB infinium 23 1915 olympic 1 66 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4401 MB Active(file): 3844 MB Inactive(file): 640 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 451 MB CommitLimit: 9960 MB Committed_AS: 9056 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2136526 root 12:22:17 6576 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2722676 9.7 Ssl 8-05:42:59 /usr/sbin/mariadbd 1220 1 netdata 204492 2.5 Ssl 55-03:23:41 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2187119 2179066 root 203928 0.0 S 10:55:36 spamd child 2179066 1 root 167212 0.0 Ss 11:10:31 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2575382 1 root 156488 0.0 Ss 8-05:43:02 /usr/lib/systemd/systemd-journald 2187120 2179066 root 150308 0.0 S 10:55:36 spamd child 2602323 2597491 infinium 127704 56.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602328 2602153 infinium 116860 46.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602339 2602056 infinium 113176 44.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602342 2598691 infinium 113108 45.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602329 2602136 infinium 112596 43.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602325 2602118 infinium 110456 44.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602324 2602148 infinium 109784 42.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602330 2602135 infinium 108968 42.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602344 2602149 infinium 104676 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602332 2602305 infinium 103208 38.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602334 2602269 infinium 101320 38.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602327 2602133 infinium 92072 33.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602331 2602130 infinium 84852 29.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602371 2602129 infinium 84780 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602333 2600798 infinium 84732 29.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602338 2602150 infinium 83508 28.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602336 2600797 infinium 80996 27.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602337 2600264 infinium 77972 25.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602345 2602268 infinium 71860 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602335 2597440 olympic 69640 29.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2449607 1353308 cpanellogin 67588 0.0 S 03:39:25 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2602340 2600270 infinium 67020 19.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602341 2602221 infinium 66448 19.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2602346 2602144 infinium 63132 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2223 1201 root 47996 0.0 Sl 55-03:23:40 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 40844 0.0 Ss 32-10:52:11 cpsrvd (SSL) - waiting for connections 1469 1 root 40632 0.1 Ss 55-03:23:40 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 34584 0.1 Sl 55-03:23:36 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2178228 1 root 30328 0.0 Ss 11:11:21 lfd - sleeping 1463 1 root 27256 0.0 Ss 55-03:23:40 tailwatchd 2111716 1 mailnull 25516 0.0 Ss 4-11:10:33 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 2600210 1276780 nobody 22232 0.0 S 03:09 /usr/sbin/httpd -k start 2600765 1276780 nobody 20944 0.3 S 02:31 /usr/sbin/httpd -k start 2596943 1276780 nobody 20848 0.0 S 08:02 /usr/sbin/httpd -k start 2600264 1276780 nobody 20464 0.3 S 03:04 /usr/sbin/httpd -k start 2597491 1276780 nobody 19968 0.0 S 07:12 /usr/sbin/httpd -k start 2600797 1276780 nobody 19296 0.0 S 02:30 /usr/sbin/httpd -k start 2600270 1276780 nobody 18988 0.0 S 03:04 /usr/sbin/httpd -k start 2597552 1276780 nobody 18968 0.0 S 07:11 /usr/sbin/httpd -k start 2597440 1276780 nobody 18564 0.0 S 07:13 /usr/sbin/httpd -k start 2600798 1276780 nobody 18564 0.0 S 02:30 /usr/sbin/httpd -k start 2602154 1276780 nobody 18504 0.0 S 00:17 /usr/sbin/httpd -k start 2600271 1276780 nobody 18396 0.0 S 03:04 /usr/sbin/httpd -k start 2602146 1276780 nobody 18184 0.1 S 00:17 /usr/sbin/httpd -k start 185104 2431 netdata 18100 2.1 Sl 10-16:59:59 /usr/libexec/netdata/plugins.d/apps.plugin 1 2598690 1276780 nobody 17856 0.0 S 05:23 /usr/sbin/httpd -k start 2602153 1276780 nobody 17840 0.1 S 00:17 /usr/sbin/httpd -k start 2602277 2111716 mailnull 17788 0.0 S 00:07 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 2602300 2111716 mailnull 17788 0.0 S 00:04 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 2602293 1276780 nobody 17572 0.0 S 00:05 /usr/sbin/httpd -k start 2598691 1276780 nobody 17412 0.0 S 05:23 /usr/sbin/httpd -k start 2600824 1276780 nobody 17076 0.0 S 02:28 /usr/sbin/httpd -k start 2602118 1276780 nobody 16916 0.0 S 00:19 /usr/sbin/httpd -k start 2602152 1276780 nobody 16836 0.0 S 00:17 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 23304130 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min cosgrovecreative/cosgrovecreative.com.au-ssl_log 431 infinium/infinium.net.au-ssl_log 193 aaa/aaadownunder.com.au 120 infinium/infinium.net.au 113 aaa/aaadownunder.com.au-ssl_log 108 olympic/olympicfencing.com.au-ssl_log 70 speedlin/speedlinefencing.com.au-ssl_log 63 nrg/nrgservices.net.au-ssl_log 51 nrg/nrgservices.net.au 45 speedlin/speedlinefencing.com.au 45 tubesupplies/tubesupplies.com.au-ssl_log 33 madalice/madalice.com.au-ssl_log 32 tubesupplies/tubesupplies.com.au 14 olympic/olympicfencing.com.au 13 corpkicks/corporatekicks.com.au-ssl_log 6 (total vhosts taking traffic: 16) --- top client IPs across all vhosts (last 3 min) --- 431 34.169.95.42 224 20.97.182.130 223 34.14.86.76 174 20.220.10.235 81 20.151.129.194 79 68.155.147.185 74 74.248.24.12 17 20.48.147.90 17 118.127.40.55 2 91.92.243.243 2 34.196.51.17 2 198.98.59.181 2 114.119.143.104 2 114.119.135.217 1 88.97.177.189 --- top request paths across all vhosts (last 3 min) --- 69 GET /fetch 12 GET /proxy 11 POST /wp-cron.php 9 GET /@fs/proc/self/environ 8 GET /admin.php 8 GET / 6 POST / 6 GET /@fs/root/.aws/credentials 6 GET /@fs/proc/1/environ 6 GET /@fs/home/ec2-user/.aws/credentials 6 GET /@fs/etc/passwd 6 GET /.env 5 GET /xty.php 5 GET /wp-login.php 5 GET /wp-content/plugins/hellopress/wp_filemanager.php 5 GET /this_is_a_new_hello_world.php 5 GET /read 5 GET /meninbox.php 5 GET /makeasmtp.php 5 GET /inputs.php --- busiest 3 vhosts: top paths + last 10 requests --- == cosgrovecreative/cosgrovecreative.com.au-ssl_log == -- top paths -- 27 GET /fetch 8 GET /proxy 3 GET /read 3 GET /@fs/proc/self/environ 3 GET /download 3 GET /debug/default/view 3 GET / 2 GET /webhook 2 GET /screenshot 2 GET /redirect 2 GET /preview 2 GET /pms -- last 10 requests -- 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /actuator/httptrace HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /debug/default/view?panel=log HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /actuator/mappings HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /trace.axd HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /elmah.axd HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /debug/default/view?panel=request HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /elmah HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /error.log HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /error_log HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.169.95.42 - - [23/Aug/2026:13:31:13 +1000] "GET /log/production.log HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" == infinium/infinium.net.au-ssl_log == -- top paths -- 21 GET /fetch 5 POST / 4 POST /wp-cron.php 4 GET /.env 3 GET /@fs/proc/self/environ 3 GET / 2 GET /proxy 2 GET /@fs/root/.aws/credentials 2 GET /@fs/proc/1/environ 2 GET /@fs/home/ec2-user/.aws/credentials 2 GET /@fs/etc/passwd 2 GET /.aws/credentials -- last 10 requests -- 34.14.86.76 - - [23/Aug/2026:13:33:30 +1000] "GET /fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 404 67725 "http://infinium.net.au/fetch?src=http%3A%2F%2F169.254.16 34.14.86.76 - - [23/Aug/2026:13:33:30 +1000] "GET /proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 404 67725 "http://infinium.net.au/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F 118.127.40.55 - - [23/Aug/2026:13:33:31 +1000] "POST /wp-cron.php?doing_wp_cron=1787456011.0536170005798339843750 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://infinium.net.au" 34.14.86.76 - - [23/Aug/2026:13:33:30 +1000] "GET /fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 404 67725 "http://infinium.net.au/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F 34.14.86.76 - - [23/Aug/2026:13:33:30 +1000] "GET /fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 404 67725 "http://infinium.net.au/fetch?src=http%3A%2F%2F169.254.169.254%2Flatest%2Fme 34.14.86.76 - - [23/Aug/2026:13:33:31 +1000] "GET /redirect?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 404 67725 "http://infinium.net.au/redirect?url=http%3A%2F%2F169. 34.14.86.76 - - [23/Aug/2026:13:33:31 +1000] "GET /@fs/app/.env?raw?? HTTP/1.1" 403 12 "http://infinium.net.au/@fs/app/.env?raw??" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) 34.14.86.76 - - [23/Aug/2026:13:33:32 +1000] "GET /@fs/.env?raw?? HTTP/1.1" 403 12 "http://infinium.net.au/@fs/.env?raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai 34.14.86.76 - - [23/Aug/2026:13:33:31 +1000] "GET /@fs/proc/1/environ?import&raw?? HTTP/1.1" 404 67725 "http://infinium.net.au/@fs/proc/1/environ?import&raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatib 34.14.86.76 - - [23/Aug/2026:13:33:32 +1000] "GET /@fs/root/.env?raw?? HTTP/1.1" 403 12 "http://infinium.net.au/@fs/root/.env?raw??" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/ama == aaa/aaadownunder.com.au == -- top paths -- 2 GET /css.php 2 GET /cong.php 2 GET /alfa.php 2 GET /admin.php 2 GET /404.php 1 GET /z60.php 1 GET /xx.php 1 GET /xv.php 1 GET /x.php 1 GET /x56.php 1 GET /x50.php 1 GET /ww1.php -- last 10 requests -- 20.97.182.130 - - [23/Aug/2026:13:32:24 +1000] "GET /xx.php HTTP/1.1" 301 282 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:25 +1000] "GET /gifclass4.php HTTP/1.1" 301 289 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:25 +1000] "GET /2clas.php HTTP/1.1" 301 285 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:26 +1000] "GET /ave.php HTTP/1.1" 301 283 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:26 +1000] "GET /wrt.php HTTP/1.1" 301 283 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:26 +1000] "GET /bibil.php HTTP/1.1" 301 285 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:27 +1000] "GET /radio.php HTTP/1.1" 301 285 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:27 +1000] "GET /files.php HTTP/1.1" 301 285 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:28 +1000] "GET /file7.php HTTP/1.1" 301 285 "-" "-" 20.97.182.130 - - [23/Aug/2026:13:32:28 +1000] "GET /gifclass.php HTTP/1.1" 301 288 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-23 13:31:12 L1=2.83 run=3 blk=0 avail=6162 (52.5%) swpO=0 conn=1 myRSS=2666 php=2 phpRSS=233 ap=36 tcp=43 topuser=customc 2026-08-23 13:31:13 L1=2.83 run=5 blk=0 avail=6181 (52.7%) swpO=0 conn=5 myRSS=2666 php=3 phpRSS=239 ap=36 tcp=43 topuser=madalice 2026-08-23 13:31:22 L1=2.79 run=3 blk=0 avail=6172 (52.6%) swpO=0 conn=1 myRSS=2666 php=2 phpRSS=232 ap=34 tcp=31 topuser=customc 2026-08-23 13:31:23 L1=2.79 run=2 blk=0 avail=6314 (53.8%) swpO=0 conn=5 myRSS=2666 php=1 phpRSS=68 ap=33 tcp=31 topuser=tubesupplies 2026-08-23 13:31:32 L1=2.83 run=5 blk=0 avail=6059 (51.7%) swpO=0 conn=1 myRSS=2666 php=5 phpRSS=534 ap=26 tcp=41 topuser=speedlin 2026-08-23 13:31:33 L1=2.83 run=5 blk=0 avail=6041 (51.5%) swpO=0 conn=5 myRSS=2666 php=5 phpRSS=545 ap=26 tcp=39 topuser=olympic 2026-08-23 13:31:42 L1=2.85 run=3 blk=0 avail=6246 (53.3%) swpO=0 conn=1 myRSS=2666 php=2 phpRSS=254 ap=26 tcp=41 topuser=customc 2026-08-23 13:31:43 L1=2.85 run=4 blk=0 avail=6249 (53.3%) swpO=0 conn=5 myRSS=2666 php=3 phpRSS=269 ap=26 tcp=39 topuser=olympic 2026-08-23 13:31:52 L1=2.80 run=4 blk=0 avail=6339 (54.0%) swpO=0 conn=1 myRSS=2666 php=3 phpRSS=191 ap=26 tcp=35 topuser=olympic 2026-08-23 13:31:53 L1=2.80 run=5 blk=0 avail=6167 (52.6%) swpO=0 conn=5 myRSS=2666 php=4 phpRSS=397 ap=25 tcp=36 topuser=speedlin 2026-08-23 13:32:02 L1=3.14 run=4 blk=0 avail=6287 (53.6%) swpO=0 conn=1 myRSS=2666 php=3 phpRSS=243 ap=25 tcp=34 topuser=madalice 2026-08-23 13:32:03 L1=3.14 run=9 blk=0 avail=6059 (51.7%) swpO=0 conn=5 myRSS=2666 php=6 phpRSS=564 ap=25 tcp=34 topuser=madalice 2026-08-23 13:32:12 L1=3.43 run=5 blk=0 avail=6255 (53.3%) swpO=0 conn=3 myRSS=2666 php=2 phpRSS=172 ap=24 tcp=34 topuser=infinium 2026-08-23 13:32:13 L1=3.43 run=7 blk=0 avail=6157 (52.5%) swpO=0 conn=5 myRSS=2666 php=5 phpRSS=444 ap=24 tcp=33 topuser=tubesupplies 2026-08-23 13:32:23 L1=3.43 run=4 blk=0 avail=6256 (53.3%) swpO=0 conn=3 myRSS=2666 php=3 phpRSS=283 ap=24 tcp=35 topuser=madalice 2026-08-23 13:32:24 L1=3.43 run=5 blk=0 avail=6062 (51.7%) swpO=0 conn=5 myRSS=2666 php=3 phpRSS=446 ap=24 tcp=34 topuser=madalice 2026-08-23 13:32:33 L1=3.29 run=6 blk=0 avail=6150 (52.4%) swpO=0 conn=3 myRSS=2666 php=4 phpRSS=414 ap=24 tcp=38 topuser=madalice 2026-08-23 13:32:34 L1=3.29 run=4 blk=0 avail=6147 (52.4%) swpO=0 conn=4 myRSS=2666 php=3 phpRSS=385 ap=24 tcp=41 topuser=madalice 2026-08-23 13:32:43 L1=3.24 run=5 blk=0 avail=6138 (52.3%) swpO=0 conn=3 myRSS=2666 php=4 phpRSS=430 ap=24 tcp=35 topuser=madalice 2026-08-23 13:32:44 L1=3.24 run=4 blk=0 avail=6168 (52.6%) swpO=0 conn=4 myRSS=2666 php=3 phpRSS=370 ap=24 tcp=35 topuser=madalice 2026-08-23 13:32:53 L1=3.42 run=5 blk=0 avail=6222 (53.1%) swpO=0 conn=3 myRSS=2666 php=4 phpRSS=371 ap=21 tcp=27 topuser=alison 2026-08-23 13:32:54 L1=3.42 run=7 blk=0 avail=6178 (52.7%) swpO=0 conn=4 myRSS=2666 php=2 phpRSS=267 ap=21 tcp=27 topuser=olympic 2026-08-23 13:33:03 L1=3.42 run=5 blk=0 avail=6117 (52.2%) swpO=0 conn=3 myRSS=2666 php=4 phpRSS=470 ap=21 tcp=27 topuser=madalice 2026-08-23 13:33:04 L1=3.42 run=2 blk=0 avail=6346 (54.1%) swpO=0 conn=4 myRSS=2666 php=1 phpRSS=150 ap=21 tcp=27 topuser=olympic 2026-08-23 13:33:13 L1=3.28 run=4 blk=0 avail=6334 (54.0%) swpO=0 conn=4 myRSS=2666 php=3 phpRSS=205 ap=22 tcp=68 topuser=speedlin 2026-08-23 13:33:14 L1=3.28 run=6 blk=0 avail=6094 (52.0%) swpO=0 conn=4 myRSS=2666 php=5 phpRSS=497 ap=24 tcp=71 topuser=infinium 2026-08-23 13:33:23 L1=3.68 run=5 blk=0 avail=6023 (51.3%) swpO=0 conn=4 myRSS=2666 php=3 phpRSS=358 ap=47 tcp=53 topuser=madalice 2026-08-23 13:33:24 L1=3.68 run=9 blk=0 avail=5895 (50.3%) swpO=0 conn=4 myRSS=2666 php=7 phpRSS=599 ap=48 tcp=79 topuser=infinium 2026-08-23 13:33:33 L1=4.04 run=30 blk=0 avail=5241 (44.7%) swpO=0 conn=23 myRSS=2666 php=24 phpRSS=1722 ap=54 tcp=66 topuser=infinium 2026-08-23 13:33:34 L1=4.04 run=24 blk=0 avail=4893 (41.7%) swpO=742 conn=14 myRSS=2648 php=15 phpRSS=1585 ap=55 tcp=66 topuser=infinium