INCIDENT 2026-08-29 02:52:03 trigger: php_rss=1537MB ================================================================== load: 2.81 2.87 2.50 9/673 1556316 ncpu:10 mem_avail: 7001MB/13777MB (50.8%) swap_used:1180MB swapout:0/s blocked(D):0 running:12 iowait:0.1% steal:0.0% php: 15 procs / 1537MB heaviest user: infinium (8 procs, 839MB) apache: 33 procs tcp_estab: 52 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2790 root 256 1351 infinium 8 765 nobody 32 687 madalice 2 288 mailman 20 235 netdata 7 199 customc 1 176 cpanellogin 1 84 evolution 8 69 dovenull 6 59 wp-toolkit 3 55 kurri 3 37 lowrange 2 29 zabbix 1 25 dovecot 3 23 mailnull 2 19 named 1 16 aaa 1 15 polkitd 1 8 --- php workers by user --- USER PROCS RSS_MB infinium 6 665 madalice 2 288 customc 1 179 root 2 103 evolution 2 54 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4928 MB Active(file): 4810 MB Inactive(file): 976 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 1255 MB CommitLimit: 10984 MB Committed_AS: 8182 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-00:33:23 7300 /usr/bin/imunify-agent-proxy 1538110 root 05:02 1368 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integr --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2857212 12.3 Ssl 1-00:32:52 /usr/sbin/mariadbd 1202218 1202214 root 182788 0.4 S 01:41:02 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload 1451906 1 root 176168 0.2 Ss 28:56 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 508924 1 netdata 173412 2.0 Ssl 1-00:32:21 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1502903 1451906 root 170052 0.0 S 15:41 spamd child 1502904 1451906 root 168388 0.0 S 15:41 spamd child 1556165 510022 madalice 159484 23.3 S 00:10 php-fpm: pool madalice_com_au 1556271 510022 madalice 136360 136 S 00:01 php-fpm: pool madalice_com_au 1556275 1537657 infinium 120956 47.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1556272 1520089 infinium 112960 44.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1556273 1556164 infinium 104056 43.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1416362 1353308 cpanellogin 86424 0.1 S 37:55 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 509266 1 root 75684 0.0 Ss 1-00:32:18 /usr/lib/systemd/systemd-journald 1415522 1202218 root 73160 98.8 R 39:11 /usr/local/cpanel/3rdparty/bin/php /opt/cpanel/ea-wappspector/wappspector.phar --max=1 --json --depth=9 /home/nrg 509236 509098 root 49928 0.0 Sl 1-00:32:18 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42324 0.1 Ss 38-00:10:44 cpsrvd (SSL) - waiting for connections 1556294 1556161 evolution 40500 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1451116 1 root 38176 0.0 Ss 29:49 lfd - sleeping 1556349 1556162 evolution 34656 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 938582 1 wp-toolkit 32992 0.0 Ss 22:39:55 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 510022 1 root 32588 0.0 Ss 1-00:32:14 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 509640 508992 root 29632 0.0 Sl 1-00:32:16 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1520089 506832 nobody 27752 0.0 S 10:04 /usr/sbin/httpd -k start 1539419 506832 nobody 26888 0.1 S 03:36 /usr/sbin/httpd -k start 1537657 506832 nobody 26288 0.0 S 05:39 /usr/sbin/httpd -k start 1520218 506832 nobody 26224 0.1 S 10:02 /usr/sbin/httpd -k start 1537659 506832 nobody 25976 0.1 S 05:39 /usr/sbin/httpd -k start 483898 1 zabbix 25704 0.2 Ssl 1-00:33:35 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1555383 506832 nobody 25308 0.6 S 01:12 /usr/sbin/httpd -k start 1538636 506832 nobody 25116 0.0 S 04:23 /usr/sbin/httpd -k start 1538637 506832 nobody 25068 0.1 S 04:23 /usr/sbin/httpd -k start 1538613 506832 nobody 24720 0.1 S 04:25 /usr/sbin/httpd -k start 1540913 506832 nobody 24700 0.1 S 02:07 /usr/sbin/httpd -k start 1469 1 root 24648 0.1 Ss 60-16:42:13 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1538622 506832 nobody 24200 0.0 S 04:24 /usr/sbin/httpd -k start 1538612 506832 nobody 23668 0.0 S 04:25 /usr/sbin/httpd -k start 1556126 506832 nobody 23200 0.1 S 00:12 /usr/sbin/httpd -k start 1556158 506832 nobody 23084 0.0 S 00:11 /usr/sbin/httpd -k start 1556159 506832 nobody 23072 0.0 S 00:11 /usr/sbin/httpd -k start 1556195 506832 nobody 22988 0.2 S 00:09 /usr/sbin/httpd -k start 1540053 506832 nobody 22820 0.0 S 03:04 /usr/sbin/httpd -k start 1555123 506832 nobody 22716 0.0 S 01:33 /usr/sbin/httpd -k start 1555091 506832 nobody 22192 0.0 S 01:34 /usr/sbin/httpd -k start 1556163 506832 nobody 21896 0.0 S 00:10 /usr/sbin/httpd -k start 1556196 506832 nobody 21864 0.1 S 00:09 /usr/sbin/httpd -k start 1463 1 root 21776 0.0 Ss 60-16:42:13 tailwatchd 1556190 506832 nobody 21708 0.0 S 00:09 /usr/sbin/httpd -k start 1556191 506832 nobody 21680 0.0 S 00:09 /usr/sbin/httpd -k start 1555433 506832 nobody 21408 0.1 S 01:09 /usr/sbin/httpd -k start 1556192 506832 nobody 21264 0.1 S 00:09 /usr/sbin/httpd -k start 938585 1 wp-toolkit 21176 0.0 Ss 22:39:55 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1556164 506832 nobody 21164 0.1 S 00:10 /usr/sbin/httpd -k start 1556162 506832 nobody 20624 0.0 S 00:10 /usr/sbin/httpd -k start 1556161 506832 nobody 20556 0.1 S 00:10 /usr/sbin/httpd -k start 506832 1 root 19268 0.0 Ss 1-00:32:51 /usr/sbin/httpd -k start 509671 508992 netdata 18200 2.1 Rl 1-00:32:16 /usr/libexec/netdata/plugins.d/apps.plugin 1 481558 1 root 18048 0.1 Ssl 1-00:34:45 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1556197 506832 nobody 17716 0.1 S 00:09 /usr/sbin/httpd -k start 508634 1 named 17280 0.0 Ssl 1-00:32:26 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1488116 1471 root 16676 0.0 S 17:14 cPhulkd - dbprocessor --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3784081 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/support.evolutionerp.com.au 230 evolution/portal.evolutionerp.com.au-ssl_log 149 olympic/olympicfencing.com.au-ssl_log 138 evolution/portal.evolutionerp.com.au 117 customc/customcentral.com.au-ssl_log 114 customc/customcentral.com.au 55 infinium/infinium.net.au-ssl_log 54 tubesupplies/tubesupplies.com.au-ssl_log 54 alison/alisonarts.com.au-ssl_log 19 tubesupplies/tubesupplies.com.au 7 evolution/my.evolutionerp.com.au-ssl_log 3 madalice/madalice.com.au-ssl_log 3 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 245 20.48.179.39 230 4.205.62.107 142 158.23.147.79 138 68.155.159.216 50 158.23.184.117 29 45.148.10.64 26 118.127.40.55 23 91.92.42.71 21 203.54.180.238 17 65.181.112.46 5 83.217.213.120 4 209.42.29.39 2 91.92.243.248 2 207.46.13.64 2 192.250.234.71 --- top request paths across all vhosts (last 3 min) --- 32 POST / 29 POST /wp-login.php 21 GET /heartbeat.php 10 POST /wp-cron.php 8 GET /wp-login.php 6 GET /wp-blog.php 5 GET /wp-content/themes/index.php 5 GET /admin.php 5 GET / 4 GET /wp-admin/css/colors/blue/ 4 GET /wp-2019.php 4 GET /privacy.php 4 GET /ms-edit.php 4 GET /menu.php 4 GET /classsmtps.php 4 GET /chosen.php 4 GET /alfa-rex.php7 3 GET /wp.php 3 GET /wp-includes/pomo/fgertreyersd.php 3 GET /wp-includes/IXR/allez.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/support.evolutionerp.com.au == -- top paths -- 2 GET /txets.php 2 GET /ms-edit.php 2 GET /motu.php 2 GET /doc.php 1 GET /zz.php 1 GET /zaza.php 1 GET //xza.php 1 GET //xve22.php 1 GET /xqq.php 1 GET /xp.php 1 GET /xmy.php 1 GET /xin1.php -- last 10 requests -- 4.205.62.107 - - [29/Aug/2026:02:51:59 +1000] "GET /loxi-o.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:51:59 +1000] "GET /luJMF.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:51:59 +1000] "GET //drykl.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:00 +1000] "GET /aws.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:00 +1000] "GET /05.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:00 +1000] "GET /xmy.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:00 +1000] "GET /wp-blog.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:01 +1000] "GET /update.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:01 +1000] "GET /fns.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [29/Aug/2026:02:52:01 +1000] "GET /25.php HTTP/1.1" 404 - "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 21 GET /heartbeat.php 3 GET /admin.php 2 GET /wp-content/themes/index.php 2 GET /av.php 1 GET /zoo1.php 1 GET /xnm-apc.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp-temp.php 1 GET /wp.php 1 GET /wp-manager.php 1 GET /wp-mails.php -- last 10 requests -- 203.54.180.238 - - [29/Aug/2026:02:50:54 +1000] "GET /heartbeat.php?sentAt=1787935854&bytes=106,145,188,110&_=1787918082721 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:03 +1000] "GET /heartbeat.php?sentAt=1787935864&bytes=106,145,188,120&_=1787897044237 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:04 +1000] "GET /heartbeat.php?sentAt=1787935864&bytes=106,145,188,120&_=1787918082722 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:13 +1000] "GET /heartbeat.php?sentAt=1787935874&bytes=106,145,188,130&_=1787897044238 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:14 +1000] "GET /heartbeat.php?sentAt=1787935874&bytes=106,145,188,130&_=1787918082723 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:23 +1000] "GET /heartbeat.php?sentAt=1787935884&bytes=106,145,188,140&_=1787897044239 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:24 +1000] "GET /heartbeat.php?sentAt=1787935884&bytes=106,145,188,140&_=1787918082724 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:33 +1000] "GET /heartbeat.php?sentAt=1787935894&bytes=106,145,188,150&_=1787897044240 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:34 +1000] "GET /heartbeat.php?sentAt=1787935894&bytes=106,145,188,150&_=1787918082725 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:02:51:43 +1000] "GET /heartbeat.php?sentAt=1787935904&bytes=106,145,188,160&_=1787897044241 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 1 GET /ws.php 1 GET /wp-trackback.php 1 GET /wp.php 1 GET /wp-mail.php 1 GET /wp-login.php 1 GET /wp-includes/wp-class.php 1 GET /wp-includes/widgets/about.php 1 GET /wp-includes/theme-compat/about.php 1 GET /wp-includes/Text/index.php 1 GET /wp-includes/Text/about.php 1 GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php 1 GET /wp-includes/SimplePie/index.php -- last 10 requests -- 68.155.159.216 - - [29/Aug/2026:02:50:58 +1000] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:50:58 +1000] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:50:58 +1000] "GET /wp-admin/css/network.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:50:59 +1000] "GET /wp-cron.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:50:59 +1000] "GET /assets/bypass.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:51:00 +1000] "GET /sx.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:51:00 +1000] "GET /0x.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:51:02 +1000] "GET /wp-admin/js/ HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:51:02 +1000] "GET /wp-admin/images/chosen.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [29/Aug/2026:02:51:03 +1000] "GET /wp-includes/wp-class.php HTTP/1.1" 404 5749 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-29 02:49:39 L1=2.72 run=3 blk=0 avail=8363 (60.7%) swpO=1 conn=2 myRSS=2790 php=5 phpRSS=363 ap=22 tcp=35 topuser=madalice 2026-08-29 02:49:43 L1=2.67 run=5 blk=0 avail=8272 (60.0%) swpO=3 conn=3 myRSS=2790 php=6 phpRSS=457 ap=22 tcp=34 topuser=customc 2026-08-29 02:49:49 L1=2.61 run=5 blk=0 avail=8188 (59.4%) swpO=3 conn=2 myRSS=2790 php=7 phpRSS=563 ap=23 tcp=39 topuser=alison 2026-08-29 02:49:53 L1=2.72 run=4 blk=0 avail=8364 (60.7%) swpO=2 conn=3 myRSS=2790 php=5 phpRSS=334 ap=23 tcp=37 topuser=customc 2026-08-29 02:49:59 L1=2.91 run=3 blk=0 avail=8311 (60.3%) swpO=2 conn=2 myRSS=2790 php=5 phpRSS=362 ap=24 tcp=43 topuser=madalice 2026-08-29 02:50:03 L1=3.16 run=5 blk=0 avail=8227 (59.7%) swpO=0 conn=3 myRSS=2790 php=6 phpRSS=421 ap=24 tcp=40 topuser=madalice 2026-08-29 02:50:09 L1=3.36 run=4 blk=0 avail=8238 (59.8%) swpO=0 conn=2 myRSS=2790 php=5 phpRSS=416 ap=25 tcp=37 topuser=madalice 2026-08-29 02:50:13 L1=3.36 run=2 blk=0 avail=8349 (60.6%) swpO=0 conn=3 myRSS=2790 php=4 phpRSS=274 ap=25 tcp=36 topuser=madalice 2026-08-29 02:50:19 L1=3.31 run=4 blk=0 avail=8193 (59.5%) swpO=0 conn=2 myRSS=2790 php=6 phpRSS=491 ap=24 tcp=36 topuser=madalice 2026-08-29 02:50:23 L1=3.31 run=5 blk=0 avail=8320 (60.4%) swpO=0 conn=2 myRSS=2790 php=6 phpRSS=370 ap=24 tcp=36 topuser=madalice 2026-08-29 02:50:30 L1=3.27 run=5 blk=0 avail=8013 (58.2%) swpO=2 conn=2 myRSS=2790 php=7 phpRSS=609 ap=24 tcp=41 topuser=madalice 2026-08-29 02:50:33 L1=3.27 run=3 blk=0 avail=8155 (59.2%) swpO=3 conn=2 myRSS=2790 php=6 phpRSS=502 ap=26 tcp=36 topuser=madalice 2026-08-29 02:50:40 L1=3.30 run=2 blk=0 avail=8094 (58.8%) swpO=0 conn=2 myRSS=2790 php=6 phpRSS=565 ap=25 tcp=37 topuser=madalice 2026-08-29 02:50:43 L1=3.30 run=6 blk=0 avail=7768 (56.4%) swpO=0 conn=2 myRSS=2790 php=10 phpRSS=1028 ap=24 tcp=42 topuser=customc 2026-08-29 02:50:50 L1=3.33 run=4 blk=0 avail=8157 (59.2%) swpO=0 conn=2 myRSS=2790 php=7 phpRSS=540 ap=24 tcp=38 topuser=madalice 2026-08-29 02:50:53 L1=3.33 run=6 blk=0 avail=8105 (58.8%) swpO=0 conn=2 myRSS=2790 php=6 phpRSS=568 ap=25 tcp=40 topuser=customc 2026-08-29 02:51:00 L1=3.35 run=3 blk=0 avail=8309 (60.3%) swpO=0 conn=2 myRSS=2790 php=5 phpRSS=319 ap=28 tcp=35 topuser=madalice 2026-08-29 02:51:03 L1=3.35 run=5 blk=0 avail=7659 (55.6%) swpO=0 conn=2 myRSS=2790 php=10 phpRSS=1029 ap=25 tcp=40 topuser=corpkicks 2026-08-29 02:51:10 L1=3.14 run=4 blk=0 avail=8340 (60.5%) swpO=0 conn=2 myRSS=2790 php=6 phpRSS=356 ap=22 tcp=34 topuser=madalice 2026-08-29 02:51:13 L1=3.14 run=3 blk=0 avail=8320 (60.4%) swpO=0 conn=2 myRSS=2790 php=5 phpRSS=344 ap=22 tcp=34 topuser=madalice 2026-08-29 02:51:20 L1=3.05 run=3 blk=0 avail=8401 (61.0%) swpO=0 conn=2 myRSS=2790 php=3 phpRSS=118 ap=22 tcp=33 topuser=root 2026-08-29 02:51:23 L1=3.05 run=6 blk=0 avail=8264 (60.0%) swpO=0 conn=5 myRSS=2790 php=7 phpRSS=450 ap=21 tcp=35 topuser=tubesupplies 2026-08-29 02:51:30 L1=2.96 run=4 blk=0 avail=8197 (59.5%) swpO=2 conn=2 myRSS=2790 php=6 phpRSS=515 ap=21 tcp=31 topuser=customc 2026-08-29 02:51:33 L1=2.96 run=4 blk=0 avail=8197 (59.5%) swpO=2 conn=5 myRSS=2790 php=6 phpRSS=509 ap=21 tcp=34 topuser=alison 2026-08-29 02:51:40 L1=3.05 run=3 blk=0 avail=8315 (60.4%) swpO=3 conn=2 myRSS=2790 php=5 phpRSS=360 ap=21 tcp=35 topuser=madalice 2026-08-29 02:51:43 L1=3.05 run=5 blk=0 avail=8026 (58.3%) swpO=3 conn=5 myRSS=2790 php=7 phpRSS=696 ap=22 tcp=36 topuser=evolution 2026-08-29 02:51:50 L1=2.96 run=4 blk=0 avail=8432 (61.2%) swpO=0 conn=2 myRSS=2790 php=4 phpRSS=207 ap=22 tcp=31 topuser=root 2026-08-29 02:51:53 L1=2.96 run=4 blk=0 avail=8326 (60.4%) swpO=0 conn=5 myRSS=2790 php=5 phpRSS=304 ap=29 tcp=49 topuser=tubesupplies 2026-08-29 02:52:00 L1=2.81 run=5 blk=0 avail=7959 (57.8%) swpO=0 conn=2 myRSS=2790 php=7 phpRSS=709 ap=35 tcp=41 topuser=corpkicks 2026-08-29 02:52:03 L1=2.81 run=12 blk=0 avail=7001 (50.8%) swpO=0 conn=11 myRSS=2790 php=15 phpRSS=1537 ap=33 tcp=52 topuser=infinium