INCIDENT 2026-08-29 17:24:04 trigger: php_rss=1537MB ================================================================== load: 1.28 1.41 1.59 9/678 375447 ncpu:10 mem_avail: 7106MB/13777MB (51.6%) swap_used:1480MB swapout:0/s blocked(D):0 running:11 iowait:0.0% steal:0.0% php: 10 procs / 1537MB heaviest user: madalice (7 procs, 1374MB) apache: 47 procs tcp_estab: 65 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2816 madalice 7 1414 root 254 1066 nobody 46 684 netdata 7 196 mailman 20 190 otterfencing 1 125 infinium 2 85 cpanellogin 1 64 dovenull 6 56 wp-toolkit 3 43 evolution 7 27 zabbix 1 22 dovecot 3 22 mailnull 2 19 named 1 16 alison 1 14 kurri 1 13 polkitd 1 6 nscd 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 7 1420 otterfencing 1 126 root 1 27 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4689 MB Active(file): 4344 MB Inactive(file): 853 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 566 MB CommitLimit: 10984 MB Committed_AS: 8581 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 290571 root 24:03 1280 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 489033 root 1-15:05:24 7112 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2884108 9.2 Ssl 1-15:04:53 /usr/sbin/mariadbd 375324 510022 madalice 246496 47.0 R 00:05 php-fpm: pool madalice_com_au 375325 510022 madalice 245936 46.2 R 00:05 php-fpm: pool madalice_com_au 375326 510022 madalice 243520 46.4 S 00:05 php-fpm: pool madalice_com_au 375202 510022 madalice 240884 18.4 R 00:24 php-fpm: pool madalice_com_au 375329 510022 madalice 236380 58.7 R 00:04 php-fpm: pool madalice_com_au 508924 1 netdata 175576 1.9 Ssl 1-15:04:22 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 83639 1451906 root 174140 0.0 S 01:26:30 spamd child 1502904 1451906 root 161128 0.0 S 14:47:42 spamd child 375001 510022 madalice 160260 13.8 S 00:49 php-fpm: pool madalice_com_au 375330 510022 madalice 138304 37.2 R 00:04 php-fpm: pool madalice_com_au 375402 370944 otterfencing 134088 111 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1451906 1 root 131856 0.0 Ss 15:00:57 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 110052 0.0 Ss 1-15:04:19 /usr/lib/systemd/systemd-journald 133529 1353308 cpanellogin 66336 0.0 S 01:12:22 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 509236 509098 root 63348 0.0 Sl 1-15:04:19 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 374513 1353308 infinium 56040 0.1 S 01:28 webmaild - serving 1.41.252.211 1353308 1 root 42528 0.1 Ss 38-14:42:45 cpsrvd (SSL) - waiting for connections 509640 508992 root 38144 0.0 Sl 1-15:04:17 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1451116 1 root 33384 0.0 Ss 15:01:50 lfd - sleeping 220778 938407 infinium 31872 0.0 S 44:08 php-fpm: pool user_infinium 510022 1 root 28324 0.0 Ss 1-15:04:15 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 25652 0.0 Ss 1-13:11:56 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 369219 506832 nobody 24268 0.0 S 03:57 /usr/sbin/httpd -k start 359271 506832 nobody 24084 0.0 S 04:44 /usr/sbin/httpd -k start 359523 506832 nobody 23820 0.0 S 04:21 /usr/sbin/httpd -k start 357650 506832 nobody 23740 0.0 S 07:31 /usr/sbin/httpd -k start 483898 1 zabbix 23088 0.2 Ssl 1-15:05:36 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 373911 506832 nobody 22976 0.0 S 02:58 /usr/sbin/httpd -k start 1469 1 root 22488 0.1 Ss 61-07:14:14 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 357662 506832 nobody 22068 0.0 S 07:31 /usr/sbin/httpd -k start 357666 506832 nobody 21664 0.0 S 07:31 /usr/sbin/httpd -k start 370944 506832 nobody 21528 0.0 S 03:56 /usr/sbin/httpd -k start 374908 506832 nobody 21400 0.0 S 00:53 /usr/sbin/httpd -k start 1463 1 root 21388 0.0 Ss 61-07:14:14 tailwatchd 374426 506832 nobody 21012 0.0 S 01:36 /usr/sbin/httpd -k start 375003 506832 nobody 19296 0.0 S 00:48 /usr/sbin/httpd -k start 375327 506832 nobody 19276 0.2 S 00:04 /usr/sbin/httpd -k start 374428 506832 nobody 18892 0.0 S 01:35 /usr/sbin/httpd -k start 508634 1 named 17400 0.0 Ssl 1-15:04:27 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 509671 508992 netdata 17068 2.1 Sl 1-15:04:17 /usr/libexec/netdata/plugins.d/apps.plugin 1 375368 506832 nobody 16860 0.0 S 00:02 /usr/sbin/httpd -k start 375367 506832 nobody 16812 0.0 S 00:02 /usr/sbin/httpd -k start 375395 506832 nobody 16812 0.0 S 00:01 /usr/sbin/httpd -k start 375397 506832 nobody 16812 0.0 S 00:01 /usr/sbin/httpd -k start 375401 506832 nobody 16812 0.0 S 00:01 /usr/sbin/httpd -k start 375369 506832 nobody 16792 0.0 S 00:02 /usr/sbin/httpd -k start 375400 506832 nobody 16784 0.0 S 00:01 /usr/sbin/httpd -k start 375394 506832 nobody 16752 0.0 S 00:01 /usr/sbin/httpd -k start 375396 506832 nobody 16752 0.0 S 00:01 /usr/sbin/httpd -k start 375399 506832 nobody 16752 0.0 S 00:01 /usr/sbin/httpd -k start 375398 506832 nobody 16748 0.0 S 00:01 /usr/sbin/httpd -k start 375370 506832 nobody 16732 0.0 S 00:02 /usr/sbin/httpd -k start 375364 506832 nobody 16688 0.0 S 00:03 /usr/sbin/httpd -k start 375365 506832 nobody 16688 0.0 S 00:03 /usr/sbin/httpd -k start 375320 506832 nobody 16684 0.0 S 00:08 /usr/sbin/httpd -k start 375138 1471 root 16284 0.0 S 00:33 cPhulkd - processor - http socket 938585 1 wp-toolkit 16232 0.0 Ss 1-13:11:56 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2766563 1471 root 16228 0.0 S 08:46:16 cPhulkd - dbprocessor 1471 1 root 16036 0.0 Ss 61-07:14:14 cPhulkd - processor --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4114461 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 4114453 | madalice_wp | madalice_wp | Query | 0 | Creating sort index | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (30355,30215,24267,28038,28039,31435,27504,29650,31434,30358,30855,29710,33491,34411,30495,24095,24104,33648,28302,24099,30810,30812,30811,24101,24103,34413,31534,30494,29596,31153,31154,30813,31156,31155,31635,33533,33536, | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min cosgrovecreative/cosgrovecreative.com.au-ssl_log 91 otter2/otterfencing.net.au-ssl_log 58 evolution/portal.evolutionerp.com.au-ssl_log 12 madalice/madalice.com.au-ssl_log 10 alison/alisonarts.com.au-ssl_log 3 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 91 20.48.250.41 58 52.139.37.240 12 203.54.180.238 3 35.231.130.18 3 114.119.140.234 2 4.204.200.136 2 114.119.146.16 1 42.201.192.77 1 42.201.192.23 1 220.181.108.80 --- top request paths across all vhosts (last 3 min) --- 12 GET /heartbeat.php 5 GET /store/hand-painted-nike-af1-rickmortydrip/ 2 GET /num.php 2 GET /403.php 1 POST /graphql 1 POST /api/graphql 1 GET /zxekqlxb.php 1 GET /zu.php 1 GET /zrjuyoos.php 1 GET /zoo.php 1 GET /zoom1.php 1 GET /zfqipfss.php 1 GET /xx.php 1 GET /xs.php 1 GET /xsox.php 1 GET /xmlrpc.php 1 GET /xda.php 1 GET /ww.php 1 GET /ws81.php 1 GET /ws77.php --- busiest 3 vhosts: top paths + last 10 requests --- == cosgrovecreative/cosgrovecreative.com.au-ssl_log == -- top paths -- 1 GET /zxekqlxb.php 1 GET /zu.php 1 GET /zoo.php 1 GET /xs.php 1 GET /xsox.php 1 GET /ww.php 1 GET /ws69.php 1 GET /ws68.php 1 GET /ws66.php 1 GET /ws58.php 1 GET /wp-style.php 1 GET /wp-scr1pts.php -- last 10 requests -- 20.48.250.41 - - [29/Aug/2026:17:23:15 +1000] "GET /a4.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:16 +1000] "GET /tfm.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:16 +1000] "GET /Geforce.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:17 +1000] "GET /click.php?p= HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:17 +1000] "GET /ms.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:18 +1000] "GET /zxekqlxb.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:18 +1000] "GET /init.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:18 +1000] "GET /term.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:19 +1000] "GET /aaa.php HTTP/1.1" 404 5749 "-" "-" 20.48.250.41 - - [29/Aug/2026:17:23:19 +1000] "GET /xsox.php HTTP/1.1" 404 5749 "-" "-" == otter2/otterfencing.net.au-ssl_log == -- top paths -- 1 GET /zoom1.php 1 GET /xx.php 1 GET /xmlrpc.php 1 GET /xda.php 1 GET /ws81.php 1 GET /ws77.php 1 GET /ws37.php 1 GET /wp-the.php 1 GET /wp-includes/PHPMailer/ 1 GET /wp-includes/ID3/index.php 1 GET /wp-includes/bk/ 1 GET /wp-content/uploads/min.php -- last 10 requests -- 52.139.37.240 - - [29/Aug/2026:17:22:41 +1000] "GET /ws77.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:41 +1000] "GET /admin/function.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:41 +1000] "GET /xx.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:41 +1000] "GET /wp-content/about.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:42 +1000] "GET /wp-the.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:42 +1000] "GET /ws81.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:42 +1000] "GET /a1.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:42 +1000] "GET /ca5.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:43 +1000] "GET /install.php HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [29/Aug/2026:17:22:43 +1000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 12 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [29/Aug/2026:17:22:13 +1000] "GET /heartbeat.php?sentAt=1787988134&bytes=106,146,136,166&_=1787897049464 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:13 +1000] "GET /heartbeat.php?sentAt=1787988134&bytes=106,146,136,166&_=1787918087949 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:23 +1000] "GET /heartbeat.php?sentAt=1787988144&bytes=106,146,136,176&_=1787897049465 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:23 +1000] "GET /heartbeat.php?sentAt=1787988144&bytes=106,146,136,176&_=1787918087950 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:33 +1000] "GET /heartbeat.php?sentAt=1787988154&bytes=106,146,136,186&_=1787897049466 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:33 +1000] "GET /heartbeat.php?sentAt=1787988154&bytes=106,146,136,186&_=1787918087951 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:43 +1000] "GET /heartbeat.php?sentAt=1787988164&bytes=106,146,136,196&_=1787897049467 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:43 +1000] "GET /heartbeat.php?sentAt=1787988164&bytes=106,146,136,196&_=1787918087952 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:53 +1000] "GET /heartbeat.php?sentAt=1787988174&bytes=106,146,136,206&_=1787897049468 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [29/Aug/2026:17:22:53 +1000] "GET /heartbeat.php?sentAt=1787988174&bytes=106,146,136,206&_=1787918087953 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-29 17:21:42 L1=2.09 run=3 blk=0 avail=8195 (59.5%) swpO=0 conn=2 myRSS=2816 php=6 phpRSS=528 ap=16 tcp=26 topuser=madalice 2026-08-29 17:21:43 L1=2.09 run=1 blk=0 avail=8225 (59.7%) swpO=0 conn=5 myRSS=2816 php=6 phpRSS=495 ap=16 tcp=27 topuser=madalice 2026-08-29 17:21:52 L1=2.00 run=3 blk=0 avail=8206 (59.6%) swpO=4 conn=2 myRSS=2816 php=5 phpRSS=495 ap=16 tcp=21 topuser=madalice 2026-08-29 17:21:53 L1=2.00 run=2 blk=0 avail=8240 (59.8%) swpO=4 conn=3 myRSS=2816 php=6 phpRSS=491 ap=16 tcp=24 topuser=madalice 2026-08-29 17:22:02 L1=1.84 run=2 blk=0 avail=8208 (59.6%) swpO=0 conn=2 myRSS=2816 php=5 phpRSS=485 ap=16 tcp=26 topuser=madalice 2026-08-29 17:22:03 L1=1.84 run=5 blk=0 avail=8166 (59.3%) swpO=0 conn=3 myRSS=2816 php=8 phpRSS=622 ap=16 tcp=28 topuser=madalice 2026-08-29 17:22:12 L1=1.56 run=2 blk=0 avail=8322 (60.4%) swpO=0 conn=1 myRSS=2816 php=4 phpRSS=353 ap=16 tcp=19 topuser=madalice 2026-08-29 17:22:14 L1=1.56 run=1 blk=0 avail=8301 (60.3%) swpO=0 conn=3 myRSS=2816 php=6 phpRSS=435 ap=15 tcp=23 topuser=madalice 2026-08-29 17:22:22 L1=1.39 run=2 blk=0 avail=8109 (58.9%) swpO=0 conn=1 myRSS=2816 php=6 phpRSS=637 ap=14 tcp=24 topuser=madalice 2026-08-29 17:22:24 L1=1.39 run=2 blk=0 avail=8213 (59.6%) swpO=0 conn=3 myRSS=2816 php=7 phpRSS=556 ap=14 tcp=25 topuser=madalice 2026-08-29 17:22:32 L1=1.25 run=1 blk=0 avail=8334 (60.5%) swpO=0 conn=1 myRSS=2816 php=4 phpRSS=330 ap=17 tcp=24 topuser=madalice 2026-08-29 17:22:34 L1=1.25 run=1 blk=0 avail=8311 (60.3%) swpO=0 conn=3 myRSS=2816 php=6 phpRSS=411 ap=17 tcp=23 topuser=madalice 2026-08-29 17:22:42 L1=1.06 run=1 blk=0 avail=8330 (60.5%) swpO=0 conn=1 myRSS=2816 php=4 phpRSS=330 ap=17 tcp=25 topuser=madalice 2026-08-29 17:22:44 L1=1.06 run=2 blk=0 avail=8313 (60.3%) swpO=0 conn=3 myRSS=2816 php=6 phpRSS=411 ap=17 tcp=26 topuser=madalice 2026-08-29 17:22:52 L1=0.97 run=3 blk=0 avail=8557 (62.1%) swpO=0 conn=1 myRSS=2816 php=3 phpRSS=91 ap=16 tcp=25 topuser=madalice 2026-08-29 17:22:54 L1=0.97 run=2 blk=0 avail=8422 (61.1%) swpO=0 conn=4 myRSS=2816 php=6 phpRSS=319 ap=16 tcp=28 topuser=madalice 2026-08-29 17:23:02 L1=0.82 run=1 blk=0 avail=8476 (61.5%) swpO=0 conn=1 myRSS=2816 php=3 phpRSS=177 ap=16 tcp=24 topuser=madalice 2026-08-29 17:23:04 L1=0.82 run=1 blk=0 avail=8450 (61.3%) swpO=0 conn=4 myRSS=2816 php=5 phpRSS=258 ap=15 tcp=25 topuser=madalice 2026-08-29 17:23:12 L1=0.85 run=2 blk=0 avail=8260 (60.0%) swpO=0 conn=3 myRSS=2816 php=5 phpRSS=440 ap=16 tcp=26 topuser=otterfencing 2026-08-29 17:23:14 L1=0.85 run=2 blk=0 avail=8385 (60.9%) swpO=0 conn=4 myRSS=2816 php=6 phpRSS=352 ap=16 tcp=25 topuser=madalice 2026-08-29 17:23:22 L1=0.88 run=4 blk=0 avail=8284 (60.1%) swpO=0 conn=3 myRSS=2816 php=6 phpRSS=423 ap=17 tcp=26 topuser=infinium 2026-08-29 17:23:24 L1=0.88 run=2 blk=0 avail=8330 (60.5%) swpO=0 conn=4 myRSS=2816 php=6 phpRSS=377 ap=17 tcp=26 topuser=madalice 2026-08-29 17:23:32 L1=0.89 run=1 blk=0 avail=8464 (61.4%) swpO=0 conn=3 myRSS=2816 php=3 phpRSS=174 ap=17 tcp=26 topuser=madalice 2026-08-29 17:23:34 L1=0.89 run=2 blk=0 avail=8368 (60.7%) swpO=0 conn=4 myRSS=2816 php=5 phpRSS=328 ap=16 tcp=28 topuser=madalice 2026-08-29 17:23:42 L1=0.91 run=3 blk=0 avail=8240 (59.8%) swpO=0 conn=3 myRSS=2816 php=4 phpRSS=339 ap=16 tcp=26 topuser=madalice 2026-08-29 17:23:44 L1=0.91 run=2 blk=0 avail=8203 (59.5%) swpO=0 conn=4 myRSS=2816 php=7 phpRSS=534 ap=16 tcp=27 topuser=madalice 2026-08-29 17:23:52 L1=0.85 run=3 blk=0 avail=8207 (59.6%) swpO=0 conn=3 myRSS=2816 php=6 phpRSS=520 ap=16 tcp=23 topuser=madalice 2026-08-29 17:23:54 L1=0.85 run=3 blk=0 avail=8265 (60.0%) swpO=0 conn=4 myRSS=2816 php=7 phpRSS=486 ap=15 tcp=24 topuser=madalice 2026-08-29 17:24:02 L1=1.28 run=2 blk=0 avail=7712 (56.0%) swpO=0 conn=3 myRSS=2816 php=9 phpRSS=989 ap=23 tcp=54 topuser=madalice 2026-08-29 17:24:04 L1=1.28 run=11 blk=0 avail=7106 (51.6%) swpO=0 conn=8 myRSS=2816 php=10 phpRSS=1537 ap=47 tcp=65 topuser=madalice