INCIDENT 2026-08-29 12:56:30 trigger: swapout=3738/s php_procs=56 php_rss=5090MB mysql_conn=46 ================================================================== load: 7.14 3.38 2.13 60/754 3660849 ncpu:10 mem_avail: 4467MB/13777MB (32.4%) swap_used:1556MB swapout:3738/s blocked(D):0 running:59 iowait:0.1% steal:0.0% php: 56 procs / 5090MB heaviest user: infinium (52 procs, 4798MB) apache: 88 procs tcp_estab: 109 --- RSS by user (all processes) --- USER PROCS RSS_MB infinium 48 4859 mysql 1 2647 nobody 90 1467 root 246 1033 netdata 7 195 mailman 20 190 madalice 1 156 evolution 8 126 cpanellogin 1 61 dovenull 6 54 wp-toolkit 3 43 zabbix 1 22 dovecot 3 22 mailnull 2 19 named 1 14 kurri 1 9 polkitd 1 6 nscd 1 4 cpanelconnecttrack 1 4 rpc 1 3 --- php workers by user --- USER PROCS RSS_MB infinium 47 4724 madalice 1 156 evolution 2 113 root 1 27 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3019 MB Active(file): 2714 MB Inactive(file): 752 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 537 MB CommitLimit: 10984 MB Committed_AS: 12211 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-10:37:51 7112 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2710744 9.8 Ssl 1-10:37:20 /usr/sbin/mariadbd 1502903 1451906 root 192916 0.0 S 10:20:09 spamd child 508924 1 netdata 174084 2.0 Ssl 1-10:36:49 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3660137 510022 madalice 160000 13.5 S 01:09 php-fpm: pool madalice_com_au 1502904 1451906 root 159440 0.0 S 10:20:09 spamd child 1451906 1 root 132096 0.0 Ss 10:33:24 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3660777 3659515 infinium 127268 11.2 S 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660733 3627804 infinium 125560 12.0 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660776 3660029 infinium 124848 12.4 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660750 3643956 infinium 123496 11.4 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660783 3660781 infinium 123452 15.0 R 00:04 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660729 3659552 infinium 123128 11.0 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660753 3657790 infinium 122972 11.4 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660746 3652748 infinium 122220 10.6 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660731 3657748 infinium 121948 11.4 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660747 3659536 infinium 121096 10.2 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660782 3659511 infinium 120368 12.5 R 00:04 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660772 3656133 infinium 120360 10.4 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660773 3656123 infinium 119612 9.6 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660759 3644610 infinium 119588 9.8 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660774 3644591 infinium 119392 10.2 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660778 3644743 infinium 118460 10.2 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660748 3660033 infinium 118176 10.4 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660788 3657792 infinium 113152 17.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660765 3645454 infinium 111656 9.6 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660728 3657772 infinium 111560 9.8 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660743 3657788 infinium 110212 10.0 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660784 3660034 evolution 108296 10.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3660751 3660045 infinium 104576 8.6 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660805 3654457 infinium 104224 46.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660754 3657738 infinium 103596 8.6 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660727 3645445 infinium 103288 9.0 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660775 3654459 infinium 103228 8.6 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660758 3657759 infinium 102796 8.8 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660804 3659534 infinium 102032 38.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660802 3659548 infinium 96712 34.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509266 1 root 96224 0.0 Ss 1-10:36:46 /usr/lib/systemd/systemd-journald 3660787 3644802 infinium 85584 10.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660801 3660024 infinium 80356 14.5 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660732 3657744 infinium 80320 12.2 R 00:05 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660789 3660785 infinium 74364 8.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660791 3654454 infinium 73364 8.3 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660799 3652752 infinium 70092 11.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509236 509098 root 64100 0.0 Sl 1-10:36:46 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3627144 1353308 cpanellogin 63272 0.1 S 08:29 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 3660800 3656135 infinium 62736 9.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660828 3657764 infinium 57276 15.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660803 3656129 infinium 52080 10.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660867 3654461 infinium 48596 5.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660843 3657773 infinium 48332 6.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660845 3657782 infinium 48112 9.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1353308 1 root 41608 0.1 Ss 38-10:15:12 cpsrvd (SSL) - waiting for connections 3660844 3656107 infinium 40624 6.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660862 3649337 infinium 37376 3.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660827 3656115 infinium 35744 3.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3660839 3660042 infinium 35532 2.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509640 508992 root 35504 0.0 Sl 1-10:36:44 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1451116 1 root 33288 0.0 Ss 10:34:17 lfd - sleeping 510022 1 root 28216 0.0 Ss 1-10:36:42 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 25608 0.0 Ss 1-08:44:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php --- processes in D state (uninterruptible IO) --- 3660860 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3998683 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min infinium/infinium.net.au-ssl_log 73 evolution/evolutionerp.com.au-ssl_log 39 cosgrovecreative/cosgrovecreative.com.au-ssl_log 37 alison/alisonarts.com.au-ssl_log 32 nrg/nrgservices.net.au-ssl_log 31 olympic/olympicfencing.com.au-ssl_log 26 tubesupplies/tubesupplies.com.au-ssl_log 25 evolution/portal.evolutionerp.com.au-ssl_log 23 madalice/madalice.com.au-ssl_log 12 evolution/my.evolutionerp.com.au-ssl_log 9 kamcool/kamcool.com.au-ssl_log 5 aaa/aaadownunder.com.au-ssl_log 3 lowrange/lowrange.com.au-ssl_log 1 (total vhosts taking traffic: 13) --- top client IPs across all vhosts (last 3 min) --- 85 192.185.176.183 37 52.139.44.162 37 20.197.61.180 32 52.139.37.240 31 20.63.81.20 25 4.204.200.136 25 20.104.68.135 23 203.54.180.238 11 118.127.40.55 7 175.36.227.212 6 2a09:bac3:18e:3464::538:61 5 93.123.109.163 3 66.116.251.167 2 94.154.43.135 2 50.6.137.53 --- top request paths across all vhosts (last 3 min) --- 81 GET /wp-login.php 37 GET /autodiscover/autodiscover.xml 23 GET /heartbeat.php 15 POST /wp-login.php 9 POST /wp-cron.php 7 POST /functions.php 5 POST / 5 GET /wp-json/wp/v2/users/me 5 GET / 3 GET /replace.php 3 GET /gulu.php 2 POST /wordpress/index.php 2 POST /wordpress/ 2 GET /xmini4.php 2 GET /wp-includes/ID3/moon.php 2 GET /wp-content/upgrade/index.php 2 GET /wp-content/themes/gaukingo/ 2 GET /wp-admin/js/wp-load.php 2 GET /store/veja-custom-swarovskius9/ 2 GET /store/toys-kids-custom-shoes/ --- busiest 3 vhosts: top paths + last 10 requests --- == infinium/infinium.net.au-ssl_log == -- top paths -- 92 GET /wp-login.php 21 POST /wp-login.php 6 POST /wp-cron.php 6 GET /wp-json/wp/v2/users/me 2 POST / 1 GET / -- last 10 requests -- 192.185.176.183 - - [29/Aug/2026:12:56:32 +1000] "POST /wp-login.php HTTP/1.1" 503 6560 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151. 192.185.176.183 - - [29/Aug/2026:12:56:32 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:29 +1000] "GET /wp-login.php HTTP/1.1" 503 6746 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:32 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:32 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:32 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:32 +1000] "POST /wp-login.php HTTP/1.1" 503 6560 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151. 192.185.176.183 - - [29/Aug/2026:12:56:33 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:33 +1000] "GET /wp-login.php HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.185.176.183 - - [29/Aug/2026:12:56:33 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 1 POST /wp-cron.php 1 GET /zwso.php 1 GET /wpsml-sys.php 1 GET /wp-setup.php 1 GET /user.php 1 GET /updates.php 1 GET /setup-config.php 1 GET /services-and-support 1 GET /robots.php 1 GET /rk2.php 1 GET /radio.php 1 GET /ova.php -- last 10 requests -- 20.197.61.180 - - [29/Aug/2026:12:56:14 +1000] "GET /f7.php HTTP/1.1" 404 30373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:15 +1000] "GET /nw.php HTTP/1.1" 404 30373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:16 +1000] "GET /ova.php HTTP/1.1" 404 30374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:17 +1000] "GET /robots.php HTTP/1.1" 404 30375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:18 +1000] "GET /alf.php HTTP/1.1" 404 30374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:20 +1000] "GET /feedback.php HTTP/1.1" 404 30375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:21 +1000] "GET /gettest.php HTTP/1.1" 404 30377 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:22 +1000] "GET /maint.php HTTP/1.1" 404 30375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:23 +1000] "GET /gecko.php HTTP/1.1" 404 30376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.197.61.180 - - [29/Aug/2026:12:56:24 +1000] "GET /zwso.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == cosgrovecreative/cosgrovecreative.com.au-ssl_log == -- top paths -- 37 GET /autodiscover/autodiscover.xml -- last 10 requests -- 52.139.44.162 - - [29/Aug/2026:12:56:03 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:04 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:05 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:06 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:06 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:07 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:08 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:09 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:10 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 52.139.44.162 - - [29/Aug/2026:12:56:11 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-29 12:54:10 L1=4.78 run=4 blk=0 avail=6820 (49.5%) swpO=0 conn=3 myRSS=2713 php=14 phpRSS=1809 ap=62 tcp=28 topuser=madalice 2026-08-29 12:54:11 L1=4.78 run=3 blk=0 avail=6860 (49.8%) swpO=0 conn=3 myRSS=2713 php=14 phpRSS=1781 ap=60 tcp=26 topuser=madalice 2026-08-29 12:54:20 L1=4.74 run=2 blk=0 avail=7041 (51.1%) swpO=0 conn=1 myRSS=2713 php=13 phpRSS=1616 ap=52 tcp=28 topuser=madalice 2026-08-29 12:54:21 L1=4.74 run=2 blk=0 avail=7011 (50.9%) swpO=0 conn=2 myRSS=2713 php=13 phpRSS=1647 ap=50 tcp=25 topuser=madalice 2026-08-29 12:54:30 L1=4.31 run=1 blk=0 avail=8062 (58.5%) swpO=0 conn=1 myRSS=2713 php=5 phpRSS=507 ap=42 tcp=26 topuser=madalice 2026-08-29 12:54:32 L1=4.31 run=3 blk=0 avail=8033 (58.3%) swpO=0 conn=2 myRSS=2713 php=6 phpRSS=578 ap=40 tcp=30 topuser=madalice 2026-08-29 12:54:40 L1=4.11 run=2 blk=0 avail=8279 (60.1%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=357 ap=32 tcp=25 topuser=corpkicks 2026-08-29 12:54:42 L1=4.11 run=2 blk=0 avail=8390 (60.9%) swpO=0 conn=2 myRSS=2713 php=4 phpRSS=261 ap=30 tcp=28 topuser=madalice 2026-08-29 12:54:50 L1=3.78 run=2 blk=0 avail=8466 (61.4%) swpO=0 conn=1 myRSS=2713 php=3 phpRSS=206 ap=22 tcp=28 topuser=madalice 2026-08-29 12:54:52 L1=3.78 run=2 blk=0 avail=8477 (61.5%) swpO=0 conn=1 myRSS=2713 php=3 phpRSS=198 ap=22 tcp=20 topuser=madalice 2026-08-29 12:55:00 L1=3.51 run=1 blk=0 avail=8493 (61.6%) swpO=0 conn=1 myRSS=2713 php=3 phpRSS=197 ap=19 tcp=23 topuser=madalice 2026-08-29 12:55:02 L1=3.51 run=9 blk=0 avail=8385 (60.9%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=298 ap=19 tcp=25 topuser=madalice 2026-08-29 12:55:10 L1=3.50 run=3 blk=0 avail=7988 (58.0%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=298 ap=82 tcp=134 topuser=madalice 2026-08-29 12:55:12 L1=3.62 run=3 blk=0 avail=7607 (55.2%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=263 ap=146 tcp=128 topuser=madalice 2026-08-29 12:55:20 L1=3.49 run=3 blk=0 avail=7684 (55.8%) swpO=0 conn=1 myRSS=2713 php=3 phpRSS=201 ap=139 tcp=28 topuser=madalice 2026-08-29 12:55:22 L1=3.37 run=1 blk=0 avail=7598 (55.1%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=322 ap=137 tcp=27 topuser=madalice 2026-08-29 12:55:30 L1=3.34 run=2 blk=0 avail=7515 (54.6%) swpO=0 conn=1 myRSS=2713 php=5 phpRSS=480 ap=129 tcp=53 topuser=madalice 2026-08-29 12:55:32 L1=3.23 run=2 blk=0 avail=7552 (54.8%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=352 ap=127 tcp=31 topuser=madalice 2026-08-29 12:55:40 L1=3.13 run=1 blk=0 avail=7679 (55.7%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=353 ap=119 tcp=24 topuser=madalice 2026-08-29 12:55:42 L1=2.88 run=1 blk=0 avail=7690 (55.8%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=353 ap=117 tcp=22 topuser=madalice 2026-08-29 12:55:50 L1=2.89 run=3 blk=0 avail=7606 (55.2%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=353 ap=109 tcp=24 topuser=madalice 2026-08-29 12:55:52 L1=2.82 run=3 blk=0 avail=7707 (55.9%) swpO=0 conn=3 myRSS=2713 php=5 phpRSS=445 ap=107 tcp=24 topuser=madalice 2026-08-29 12:56:00 L1=2.68 run=1 blk=0 avail=7822 (56.8%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=352 ap=98 tcp=23 topuser=madalice 2026-08-29 12:56:02 L1=2.54 run=2 blk=0 avail=7720 (56.0%) swpO=0 conn=3 myRSS=2713 php=5 phpRSS=495 ap=97 tcp=27 topuser=madalice 2026-08-29 12:56:10 L1=2.42 run=5 blk=0 avail=7432 (53.9%) swpO=0 conn=1 myRSS=2713 php=9 phpRSS=968 ap=88 tcp=26 topuser=madalice 2026-08-29 12:56:12 L1=2.30 run=2 blk=0 avail=7889 (57.3%) swpO=0 conn=3 myRSS=2713 php=4 phpRSS=373 ap=87 tcp=22 topuser=evolution 2026-08-29 12:56:20 L1=2.20 run=2 blk=0 avail=7971 (57.9%) swpO=0 conn=1 myRSS=2713 php=4 phpRSS=357 ap=78 tcp=22 topuser=evolution 2026-08-29 12:56:22 L1=2.10 run=4 blk=0 avail=8086 (58.7%) swpO=0 conn=3 myRSS=2713 php=4 phpRSS=257 ap=77 tcp=27 topuser=madalice 2026-08-29 12:56:30 L1=7.14 run=59 blk=0 avail=4467 (32.4%) swpO=3738 conn=46 myRSS=2647 php=56 phpRSS=5090 ap=88 tcp=109 topuser=infinium 2026-08-29 12:56:32 L1=11.53 run=58 blk=2 avail=5511 (40.0%) swpO=3738 conn=37 myRSS=2647 php=59 phpRSS=4396 ap=89 tcp=121 topuser=infinium