INCIDENT 2026-08-29 03:38:15 trigger: php_procs=51 php_rss=2417MB ================================================================== load: 1.24 1.84 1.75 47/772 1714152 ncpu:10 mem_avail: 7033MB/13777MB (51.0%) swap_used:1258MB swapout:867/s blocked(D):0 running:56 iowait:0.1% steal:0.0% php: 51 procs / 2417MB heaviest user: infinium (43 procs, 1744MB) apache: 83 procs tcp_estab: 106 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2750 nobody 80 1486 infinium 37 1469 root 263 1188 madalice 3 476 mailman 20 229 netdata 7 204 tubesupplies 2 110 cpanellogin 1 92 dovenull 6 59 wp-toolkit 3 51 lowrange 3 44 kurri 3 37 evolution 7 29 dovecot 3 23 zabbix 1 22 named 1 16 aaa 1 15 mailnull 1 9 polkitd 1 8 --- php workers by user --- USER PROCS RSS_MB infinium 32 1270 madalice 3 476 tubesupplies 2 114 root 1 30 evolution 1 14 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3842 MB Active(file): 4107 MB Inactive(file): 737 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 1333 MB CommitLimit: 10984 MB Committed_AS: 9371 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-01:19:35 7508 /usr/bin/imunify-agent-proxy 1644966 root 19:14 3180 /bin/bash /etc/cron.daily/imunify-antivirus.cron 1644967 root 19:14 1228 sed 1i\ /etc/cron.daily/imunify-antivirus.cron:\ 1644968 root 19:14 9100 /usr/libexec/report-command-error /opt/imunify360/venv/bin/python3 /opt/imunify360/venv/share/imunify360/scripts/delay_on_cron_call.py 1644980 root 19:14 14608 /opt/imunify360/venv/bin/python3 /opt/imunify360/venv/share/imunify360/scripts/delay_on_cron_call.py --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2816548 12.0 Ssl 1-01:19:04 /usr/sbin/mariadbd 1502903 1451906 root 184516 0.0 S 01:01:53 spamd child 508924 1 netdata 179548 2.0 Ssl 1-01:18:33 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451906 1 root 175572 0.1 Ss 01:15:08 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1502904 1451906 root 165196 0.0 S 01:01:53 spamd child 1695126 510022 madalice 164180 25.3 S 06:26 php-fpm: pool madalice_com_au 1695698 510022 madalice 162060 25.3 S 05:56 php-fpm: pool madalice_com_au 1696463 510022 madalice 161308 25.9 S 04:56 php-fpm: pool madalice_com_au 1416362 1353308 cpanellogin 94828 0.0 S 01:24:07 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1714064 1713731 tubesupplies 85544 54.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509266 1 root 76780 0.0 Ss 1-01:18:30 /usr/lib/systemd/systemd-journald 1714132 1713430 tubesupplies 51844 13.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1714145 1713927 infinium 49832 7.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509236 509098 root 47916 0.0 Sl 1-01:18:30 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1714137 1713992 infinium 46068 9.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1353308 1 root 41308 0.1 Ss 38-00:56:56 cpsrvd (SSL) - waiting for connections 1714138 1713985 infinium 38588 9.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1451116 1 root 36720 0.0 Ss 01:16:01 lfd - sleeping 510022 1 root 31516 0.0 Ss 1-01:18:26 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 30864 0.0 Ss 23:26:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509640 508992 root 30148 0.0 Sl 1-01:18:28 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1714149 1469 root 29372 0.0 S 00:01 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1714130 1713988 infinium 25340 9.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1469 1 root 24088 0.1 Ss 60-17:28:25 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1696905 506832 nobody 23328 0.1 S 04:24 /usr/sbin/httpd -k start 1696268 506832 nobody 23152 0.4 S 05:11 /usr/sbin/httpd -k start 483898 1 zabbix 23124 0.2 Ssl 1-01:19:47 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1694150 506832 nobody 23008 0.2 S 07:23 /usr/sbin/httpd -k start 1695524 506832 nobody 22988 0.1 S 06:08 /usr/sbin/httpd -k start 1694202 506832 nobody 22960 0.0 S 07:20 /usr/sbin/httpd -k start 1712065 506832 nobody 21700 0.0 S 02:30 /usr/sbin/httpd -k start 1463 1 root 21692 0.0 Ss 60-17:28:25 tailwatchd 1713901 506832 nobody 21536 0.5 S 00:06 /usr/sbin/httpd -k start 1713400 506832 nobody 21444 0.0 S 00:42 /usr/sbin/httpd -k start 1696904 506832 nobody 21432 0.0 S 04:24 /usr/sbin/httpd -k start 1713935 506832 nobody 21396 0.4 S 00:05 /usr/sbin/httpd -k start 1712063 506832 nobody 21380 0.0 S 02:30 /usr/sbin/httpd -k start 1713932 506832 nobody 21304 0.4 S 00:05 /usr/sbin/httpd -k start 1713924 506832 nobody 21292 0.4 S 00:05 /usr/sbin/httpd -k start 1713923 506832 nobody 21244 0.4 S 00:05 /usr/sbin/httpd -k start 1713921 506832 nobody 21200 0.4 S 00:05 /usr/sbin/httpd -k start 1713934 506832 nobody 21184 0.6 S 00:05 /usr/sbin/httpd -k start 1713926 506832 nobody 21136 0.4 S 00:05 /usr/sbin/httpd -k start 1713928 506832 nobody 21136 0.4 S 00:05 /usr/sbin/httpd -k start 1713899 506832 nobody 21120 0.3 S 00:06 /usr/sbin/httpd -k start 1713897 506832 nobody 21100 0.3 S 00:06 /usr/sbin/httpd -k start 1713898 506832 nobody 21100 0.1 S 00:06 /usr/sbin/httpd -k start 1713931 506832 nobody 21100 0.4 S 00:05 /usr/sbin/httpd -k start 1713927 506832 nobody 21088 0.4 S 00:05 /usr/sbin/httpd -k start 1713922 506832 nobody 21072 0.4 S 00:05 /usr/sbin/httpd -k start 1713925 506832 nobody 21036 0.4 S 00:05 /usr/sbin/httpd -k start 1713900 506832 nobody 20992 0.3 S 00:06 /usr/sbin/httpd -k start 1713929 506832 nobody 20944 0.2 S 00:05 /usr/sbin/httpd -k start 1696889 506832 nobody 20860 0.1 S 04:25 /usr/sbin/httpd -k start 1713194 506832 nobody 20588 0.0 S 01:01 /usr/sbin/httpd -k start 1713430 506832 nobody 20492 0.0 S 00:41 /usr/sbin/httpd -k start 1712515 506832 nobody 20432 0.0 S 01:48 /usr/sbin/httpd -k start 1713930 506832 nobody 20240 0.2 S 00:05 /usr/sbin/httpd -k start 1713986 506832 nobody 20192 0.5 S 00:04 /usr/sbin/httpd -k start 1713969 506832 nobody 20136 0.0 S 00:04 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3796708 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min infinium/infinium.net.au-ssl_log 353 madalice/madalice.com.au-ssl_log 62 cosgrovecreative/cosgrovecreative.com.au-ssl_log 61 tubesupplies/tubesupplies.com.au-ssl_log 51 evolution/portal.evolutionerp.com.au-ssl_log 19 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 245 4.205.62.107 104 69.6.249.177 61 31.59.160.30 55 20.48.147.90 19 203.54.180.238 14 203.2.112.125 7 20.220.227.7 3 69.6.220.159 3 118.127.40.55 2 44.223.232.55 2 107.189.29.12 1 98.82.38.120 1 98.82.214.73 1 66.249.73.167 1 54.243.63.52 --- top request paths across all vhosts (last 3 min) --- 50 GET /wp-login.php 37 GET /wp-json/wp/v2/users/me 21 POST /wp-login.php 19 POST / 19 GET /heartbeat.php 13 GET / 12 POST /index.php 5 POST /wp-json/Batch/v1 5 POST /wp-json/batch/v1/ 5 POST /wp-json/batch/v1 5 POST //wp-json/batch/v1 5 POST /wordpress/wp-json/batch/v1 5 POST /blog/wp-json/batch/v1 3 POST /wp-cron.php 3 GET /store/donutswoosh-af1-custom-shoes/ 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /wp-content/plugins/elementor-pro/modules/assets-manager/asset-types/icons/icon-sets/ 2 GET /thui.php 2 GET /this_is_a_new_hello_world.php 2 GET /setup-config.php --- busiest 3 vhosts: top paths + last 10 requests --- == infinium/infinium.net.au-ssl_log == -- top paths -- 49 GET /wp-login.php 37 GET /wp-json/wp/v2/users/me 21 POST /wp-login.php 2 GET /thui.php 2 GET /ms-edit.php 2 GET /motu.php 2 GET /koiy.php 2 GET /doc.php 2 GET /aww.php 1 POST /wp-cron.php 1 GET /zz.php 1 GET /zaza.php -- last 10 requests -- 69.6.249.177 - - [29/Aug/2026:03:38:15 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.6.249.177 - - [29/Aug/2026:03:38:14 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/donutswoosh-af1-custom-shoes/ 1 GET /wp-includes/js/codemirror/hehe.php 1 GET /wp-includes/js/ 1 GET /wp-includes/fonts/up.php 1 GET /wp-includes/as.php 1 GET /wp-content/uploads/2024/02.php 1 GET /wp-admin/user/rk2.php 1 GET /wp-admin/js/widgets/alfa.php 1 GET /wp-admin/jp.php 1 GET /wp-admin/css/wp.php 1 GET /wp-admin/css/media.php 1 GET /wp-admin/class.php -- last 10 requests -- 20.48.147.90 - - [29/Aug/2026:03:37:17 +1000] "GET /update/wp-damin.php HTTP/1.1" 404 36649 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:19 +1000] "GET /img/item.php HTTP/1.1" 404 36643 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:20 +1000] "GET /img/mpvloi.php HTTP/1.1" 404 36648 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:22 +1000] "GET /images/cong.php HTTP/1.1" 404 36646 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:24 +1000] "GET /js/maint.php HTTP/1.1" 404 36644 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:26 +1000] "GET /wp-includes/fonts/up.php HTTP/1.1" 404 36647 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:28 +1000] "GET /cgi-bin/upload.php HTTP/1.1" 404 36643 "-" "-" 20.48.147.90 - - [29/Aug/2026:03:37:29 +1000] "GET /files/chosen.php HTTP/1.1" 404 36646 "-" "-" 2a03:2880:f802:5:: - - [29/Aug/2026:03:37:33 +1000] "GET /tag/raiders/ HTTP/1.1" 200 35065 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compa 216.26.248.9 - - [29/Aug/2026:03:37:42 +1000] "GET /tag/wedding-af1/ HTTP/1.1" 200 35414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" == cosgrovecreative/cosgrovecreative.com.au-ssl_log == -- top paths -- 19 POST / 12 POST /index.php 5 POST /wp-json/Batch/v1 5 POST /wp-json/batch/v1/ 5 POST /wp-json/batch/v1 5 POST //wp-json/batch/v1 5 POST /wordpress/wp-json/batch/v1 5 POST /blog/wp-json/batch/v1 -- last 10 requests -- 31.59.160.30 - - [29/Aug/2026:03:38:04 +1000] "POST /wp-json/Batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec 31.59.160.30 - - [29/Aug/2026:03:38:05 +1000] "POST //wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge 31.59.160.30 - - [29/Aug/2026:03:38:05 +1000] "POST /wp-json/batch/v1/ HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge 31.59.160.30 - - [29/Aug/2026:03:38:05 +1000] "POST /blog/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 31.59.160.30 - - [29/Aug/2026:03:38:06 +1000] "POST /wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML 31.59.160.30 - - [29/Aug/2026:03:38:06 +1000] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 31.59.160.30 - - [29/Aug/2026:03:38:06 +1000] "POST /index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 31.59.160.30 - - [29/Aug/2026:03:38:07 +1000] "POST /?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 31.59.160.30 - - [29/Aug/2026:03:38:07 +1000] "POST /?rest_route=/batch%2Fv1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l 31.59.160.30 - - [29/Aug/2026:03:38:08 +1000] "POST /?rest_route=/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.cosgrovecreative.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik --- last 30 samples (run-up to this incident) --- 2026-08-29 03:35:48 L1=2.75 run=4 blk=0 avail=7724 (56.1%) swpO=0 conn=1 myRSS=2770 php=7 phpRSS=772 ap=27 tcp=44 topuser=madalice 2026-08-29 03:35:54 L1=2.77 run=4 blk=0 avail=7742 (56.2%) swpO=1 conn=5 myRSS=2770 php=8 phpRSS=796 ap=26 tcp=43 topuser=madalice 2026-08-29 03:35:58 L1=2.71 run=4 blk=0 avail=7847 (57.0%) swpO=1 conn=1 myRSS=2770 php=6 phpRSS=629 ap=26 tcp=47 topuser=madalice 2026-08-29 03:36:04 L1=2.65 run=5 blk=0 avail=7688 (55.8%) swpO=0 conn=5 myRSS=2770 php=9 phpRSS=868 ap=26 tcp=42 topuser=madalice 2026-08-29 03:36:08 L1=2.76 run=4 blk=0 avail=7760 (56.3%) swpO=0 conn=1 myRSS=2770 php=6 phpRSS=734 ap=24 tcp=38 topuser=madalice 2026-08-29 03:36:14 L1=2.70 run=2 blk=0 avail=7914 (57.4%) swpO=0 conn=5 myRSS=2770 php=8 phpRSS=679 ap=20 tcp=34 topuser=madalice 2026-08-29 03:36:18 L1=2.64 run=2 blk=0 avail=7983 (57.9%) swpO=0 conn=1 myRSS=2770 php=5 phpRSS=521 ap=19 tcp=35 topuser=madalice 2026-08-29 03:36:24 L1=2.59 run=3 blk=0 avail=7963 (57.8%) swpO=0 conn=5 myRSS=2770 php=7 phpRSS=608 ap=17 tcp=34 topuser=madalice 2026-08-29 03:36:28 L1=2.38 run=4 blk=0 avail=7815 (56.7%) swpO=0 conn=1 myRSS=2770 php=7 phpRSS=759 ap=18 tcp=40 topuser=madalice 2026-08-29 03:36:34 L1=2.19 run=2 blk=0 avail=7962 (57.8%) swpO=0 conn=5 myRSS=2770 php=7 phpRSS=599 ap=18 tcp=36 topuser=madalice 2026-08-29 03:36:38 L1=2.10 run=2 blk=0 avail=7979 (57.9%) swpO=0 conn=2 myRSS=2770 php=5 phpRSS=527 ap=18 tcp=35 topuser=madalice 2026-08-29 03:36:44 L1=2.01 run=4 blk=0 avail=7693 (55.8%) swpO=0 conn=5 myRSS=2770 php=9 phpRSS=941 ap=17 tcp=37 topuser=madalice 2026-08-29 03:36:48 L1=2.01 run=8 blk=0 avail=7491 (54.4%) swpO=0 conn=2 myRSS=2775 php=10 phpRSS=1030 ap=20 tcp=45 topuser=evolution 2026-08-29 03:36:54 L1=1.93 run=2 blk=0 avail=7944 (57.7%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=604 ap=18 tcp=38 topuser=madalice 2026-08-29 03:36:58 L1=1.77 run=2 blk=0 avail=7916 (57.5%) swpO=0 conn=2 myRSS=2775 php=5 phpRSS=579 ap=18 tcp=38 topuser=madalice 2026-08-29 03:37:04 L1=1.71 run=2 blk=0 avail=7953 (57.7%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=600 ap=17 tcp=40 topuser=madalice 2026-08-29 03:37:08 L1=1.73 run=2 blk=0 avail=7986 (58.0%) swpO=0 conn=2 myRSS=2775 php=5 phpRSS=519 ap=17 tcp=41 topuser=madalice 2026-08-29 03:37:14 L1=1.75 run=5 blk=0 avail=7742 (56.2%) swpO=0 conn=4 myRSS=2775 php=9 phpRSS=868 ap=18 tcp=43 topuser=madalice 2026-08-29 03:37:18 L1=1.77 run=1 blk=0 avail=7964 (57.8%) swpO=3 conn=2 myRSS=2775 php=5 phpRSS=521 ap=20 tcp=44 topuser=madalice 2026-08-29 03:37:24 L1=1.71 run=2 blk=0 avail=7955 (57.7%) swpO=3 conn=4 myRSS=2775 php=7 phpRSS=601 ap=19 tcp=40 topuser=madalice 2026-08-29 03:37:28 L1=1.74 run=4 blk=0 avail=7941 (57.6%) swpO=0 conn=2 myRSS=2775 php=6 phpRSS=588 ap=19 tcp=40 topuser=madalice 2026-08-29 03:37:34 L1=1.68 run=2 blk=0 avail=7900 (57.3%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=655 ap=20 tcp=46 topuser=madalice 2026-08-29 03:37:38 L1=1.54 run=3 blk=0 avail=7844 (56.9%) swpO=0 conn=4 myRSS=2775 php=8 phpRSS=738 ap=22 tcp=42 topuser=madalice 2026-08-29 03:37:44 L1=1.42 run=3 blk=0 avail=7941 (57.6%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=600 ap=21 tcp=42 topuser=madalice 2026-08-29 03:37:48 L1=1.47 run=2 blk=0 avail=7960 (57.8%) swpO=0 conn=4 myRSS=2775 php=5 phpRSS=522 ap=22 tcp=38 topuser=madalice 2026-08-29 03:37:54 L1=1.35 run=2 blk=0 avail=7912 (57.4%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=642 ap=19 tcp=38 topuser=madalice 2026-08-29 03:37:58 L1=1.32 run=3 blk=0 avail=7922 (57.5%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=632 ap=19 tcp=42 topuser=madalice 2026-08-29 03:38:04 L1=1.29 run=2 blk=0 avail=7904 (57.4%) swpO=0 conn=4 myRSS=2775 php=7 phpRSS=642 ap=20 tcp=39 topuser=madalice 2026-08-29 03:38:08 L1=1.35 run=1 blk=0 avail=7928 (57.5%) swpO=0 conn=4 myRSS=2775 php=5 phpRSS=523 ap=27 tcp=141 topuser=madalice 2026-08-29 03:38:15 L1=1.24 run=56 blk=0 avail=7033 (51.0%) swpO=867 conn=2 myRSS=2750 php=51 phpRSS=2417 ap=83 tcp=106 topuser=infinium