INCIDENT 2026-08-30 08:27:32 trigger: php_procs=56 php_rss=4341MB mysql_conn=44 ================================================================== load: 0.84 0.86 1.00 55/722 3516266 ncpu:10 mem_avail: 5735MB/13777MB (41.6%) swap_used:1844MB swapout:554/s blocked(D):2 running:51 iowait:0.1% steal:0.0% php: 56 procs / 4341MB heaviest user: infinium (53 procs, 4149MB) apache: 57 procs tcp_estab: 105 --- RSS by user (all processes) --- USER PROCS RSS_MB infinium 50 4327 mysql 1 2736 root 242 1088 nobody 59 1011 netdata 7 198 madalice 1 155 mailman 20 121 cpanellogin 1 68 dovenull 6 44 wp-toolkit 3 30 kurri 2 26 mailnull 1 24 zabbix 1 22 evolution 5 22 dovecot 3 19 named 1 15 lowrange 1 14 polkitd 1 5 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB infinium 48 4325 madalice 1 155 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4119 MB Active(file): 3666 MB Inactive(file): 821 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 607 MB CommitLimit: 10984 MB Committed_AS: 11310 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-06:08:54 7168 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2802596 7.5 Ssl 2-06:08:23 /usr/sbin/mariadbd 2328310 2277352 root 187856 0.0 S 05:49:23 spamd child 508924 1 netdata 178276 1.9 Ssl 2-06:07:52 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175580 0.0 Ss 06:04:29 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 167712 0.0 S 05:49:23 spamd child 3515692 510022 madalice 158876 8.4 S 00:54 php-fpm: pool madalice_com_au 509266 1 root 140340 0.0 Ss 2-06:07:49 /usr/lib/systemd/systemd-journald 3516182 3515671 infinium 124828 18.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516188 3515532 infinium 123252 18.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516192 3515542 infinium 123064 20.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516197 3500516 infinium 122796 18.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516198 3499358 infinium 121888 19.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516183 3515541 infinium 119548 16.3 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516191 3515540 infinium 119368 19.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516201 3515587 infinium 119340 17.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516215 3515617 infinium 116112 25.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516200 3515574 infinium 115924 16.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516179 3515665 infinium 112052 15.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516194 3515573 infinium 111860 18.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516196 3515539 infinium 111788 17.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516207 3515616 infinium 111752 16.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516185 3515668 infinium 111624 18.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516190 3515533 infinium 110616 17.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516193 3515675 infinium 110600 15.6 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516213 3515621 infinium 110468 23.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516180 3515661 infinium 110384 17.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516210 3515631 infinium 110244 17.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516208 3515459 infinium 108836 14.3 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516203 3515148 infinium 107496 14.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516204 3515625 infinium 102832 14.3 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516187 3515576 infinium 102808 14.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516211 3515618 infinium 102648 24.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516212 3515614 infinium 102324 21.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516184 3515537 infinium 101516 14.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516186 3515669 infinium 95528 13.0 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516227 3515529 infinium 95464 38.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516222 3515528 infinium 90832 33.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516223 3515633 infinium 90712 36.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516189 3515579 infinium 80872 19.3 R 00:03 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516221 3515640 infinium 78072 33.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516219 3515642 infinium 78052 31.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516231 3515648 infinium 77992 36.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516229 3515650 infinium 74724 26.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3397810 1353308 cpanellogin 69816 0.0 S 33:41 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 3516225 3515651 infinium 67944 29.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516240 3516230 infinium 64736 18.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516228 3515649 infinium 63840 21.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516220 3515641 infinium 63108 25.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516224 3515656 infinium 61552 18.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516226 3515653 infinium 59140 14.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516264 3516261 infinium 58568 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509236 509098 root 52816 0.0 Sl 2-06:07:49 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3516265 3501029 infinium 51780 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516277 3515581 infinium 50436 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516278 3515664 infinium 48340 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509640 508992 root 46264 0.0 Sl 2-06:07:47 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 41984 0.1 Ss 39-05:46:15 cpsrvd (SSL) - waiting for connections 3516260 3515580 infinium 39448 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516291 3515663 infinium 38448 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3516285 3516262 infinium 37720 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4399086 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min infinium/infinium.net.au-ssl_log 91 bigdeals/bigdeals.com.au-ssl_log 76 infinium/infinium.net.au 44 evolution/portal.evolutionerp.com.au-ssl_log 22 kamcool/kamcool.com.au-ssl_log 19 madalice/madalice.com.au-ssl_log 9 evolution/evolutionerp.com.au-ssl_log 6 olympic/olympicfencing.com.au-ssl_log 6 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 105 20.151.200.44 76 52.139.37.240 44 198.57.247.188 22 203.54.180.238 15 74.7.243.250 6 91.224.92.32 6 118.127.40.55 3 114.119.146.16 2 46.105.42.135 2 195.178.110.38 2 146.70.36.124 2 103.28.36.105 1 79.160.15.94 1 74.7.175.165 1 54.38.53.158 --- top request paths across all vhosts (last 3 min) --- 49 GET /wp-login.php 22 GET /heartbeat.php 15 GET / 9 GET /cgi-bin/ 6 GET /store/crease-guards/ 5 POST /wp-cron.php 3 GET /wp-content/admin.php 3 GET /wp-admin/js/index.php 3 GET /wk/index.php 2 GET /zoz.php 2 GET /xwpg.php 2 GET /xda.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /wp-admin/maint/Jcrop.php 2 GET /wp-admin/js/ 2 GET /wp-access.php 2 GET /wefile.php 2 GET /update/da222.php 2 GET /txets.php 2 GET /this_is_a_new_hello_world.php --- busiest 3 vhosts: top paths + last 10 requests --- == infinium/infinium.net.au-ssl_log == -- top paths -- 46 GET /wp-login.php 3 POST /wp-cron.php 1 POST /wp-login.php 1 POST / 1 GET /zoz.php 1 GET /xwpg.php 1 GET /xda.php 1 GET /wt.php 1 GET /wp-ver.php 1 GET /wp-the.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-content/admin.php -- last 10 requests -- 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:32 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:32 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:31 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.57.247.188 - - [30/Aug/2026:08:27:32 +1000] "GET /wp-login.php HTTP/1.1" 200 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" == bigdeals/bigdeals.com.au-ssl_log == -- top paths -- 1 GET /zup.php73 1 GET /x.php 1 GET /xleet.php 1 GET /ww5.php 1 GET /ws83.php 1 GET /ws54.php 1 GET /wp-mail.php 1 GET /wp-good.php 1 GET /wpc.php 1 GET /wp-content/uploads/index.php 1 GET /wp-content/uploads/ 1 GET /wp-content/themes/admin.php -- last 10 requests -- 52.139.37.240 - - [30/Aug/2026:08:25:35 +1000] "GET /wp-admin/js/index.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:35 +1000] "GET /zup.php73 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:35 +1000] "GET /wp-blink.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:36 +1000] "GET /randkeyword.PhP7 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:36 +1000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:36 +1000] "GET /wp-content/ HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:36 +1000] "GET /ww5.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:36 +1000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:37 +1000] "GET /atomlib.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.37.240 - - [30/Aug/2026:08:25:37 +1000] "GET /rip.php HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == infinium/infinium.net.au == -- top paths -- 1 GET /zoz.php 1 GET /xwpg.php 1 GET /xda.php 1 GET /wp-login.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-content/admin.php 1 GET /wp-admin/maint/Jcrop.php 1 GET /wp-admin/js/index.php 1 GET /wp-access.php 1 GET /wk/index.php 1 GET /wefile.php 1 GET /update/da222.php -- last 10 requests -- 20.151.200.44 - - [30/Aug/2026:08:26:17 +1000] "GET /css/000.php HTTP/1.1" 301 283 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:18 +1000] "GET /cy.php HTTP/1.1" 301 278 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:19 +1000] "GET /admin.php/pindex.php HTTP/1.1" 301 292 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:21 +1000] "GET /admin.php/csv.php HTTP/1.1" 301 289 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:23 +1000] "GET /admin.php/700.php HTTP/1.1" 301 289 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:24 +1000] "GET /admin.php/007x.php HTTP/1.1" 301 290 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:26 +1000] "GET /admin.php/heex.php HTTP/1.1" 301 290 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:27 +1000] "GET /tf.php HTTP/1.1" 301 278 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:28 +1000] "GET /update/da222.php HTTP/1.1" 301 288 "-" "-" 20.151.200.44 - - [30/Aug/2026:08:26:29 +1000] "GET /qi.php HTTP/1.1" 301 278 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-30 08:25:10 L1=0.42 run=2 blk=0 avail=8512 (61.8%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=190 ap=17 tcp=23 topuser=madalice 2026-08-30 08:25:11 L1=0.42 run=2 blk=0 avail=8463 (61.4%) swpO=0 conn=2 myRSS=2763 php=4 phpRSS=274 ap=17 tcp=24 topuser=madalice 2026-08-30 08:25:20 L1=0.43 run=1 blk=0 avail=8524 (61.9%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=168 ap=17 tcp=24 topuser=madalice 2026-08-30 08:25:21 L1=0.43 run=1 blk=0 avail=8523 (61.9%) swpO=0 conn=2 myRSS=2763 php=3 phpRSS=168 ap=17 tcp=22 topuser=madalice 2026-08-30 08:25:30 L1=0.36 run=1 blk=0 avail=8526 (61.9%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=168 ap=16 tcp=21 topuser=madalice 2026-08-30 08:25:31 L1=0.36 run=2 blk=0 avail=8490 (61.6%) swpO=0 conn=2 myRSS=2763 php=4 phpRSS=237 ap=16 tcp=24 topuser=madalice 2026-08-30 08:25:40 L1=0.77 run=4 blk=0 avail=8410 (61.0%) swpO=0 conn=1 myRSS=2763 php=5 phpRSS=366 ap=17 tcp=28 topuser=madalice 2026-08-30 08:25:41 L1=0.77 run=4 blk=0 avail=8316 (60.4%) swpO=0 conn=2 myRSS=2763 php=6 phpRSS=472 ap=19 tcp=30 topuser=evolution 2026-08-30 08:25:50 L1=0.73 run=1 blk=0 avail=8510 (61.8%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=190 ap=18 tcp=22 topuser=madalice 2026-08-30 08:25:52 L1=0.73 run=1 blk=0 avail=8510 (61.8%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=190 ap=18 tcp=23 topuser=madalice 2026-08-30 08:26:00 L1=0.70 run=2 blk=0 avail=8502 (61.7%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=168 ap=17 tcp=30 topuser=madalice 2026-08-30 08:26:02 L1=0.70 run=3 blk=0 avail=8450 (61.3%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=168 ap=17 tcp=29 topuser=madalice 2026-08-30 08:26:10 L1=0.59 run=2 blk=0 avail=8536 (62.0%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=218 ap=17 tcp=25 topuser=madalice 2026-08-30 08:26:12 L1=0.59 run=2 blk=0 avail=8526 (61.9%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=219 ap=17 tcp=24 topuser=madalice 2026-08-30 08:26:20 L1=0.81 run=6 blk=0 avail=7978 (57.9%) swpO=0 conn=1 myRSS=2763 php=9 phpRSS=896 ap=20 tcp=30 topuser=evolution 2026-08-30 08:26:22 L1=0.81 run=2 blk=0 avail=8494 (61.7%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=214 ap=20 tcp=25 topuser=madalice 2026-08-30 08:26:30 L1=1.00 run=1 blk=0 avail=8410 (61.0%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=190 ap=33 tcp=133 topuser=madalice 2026-08-30 08:26:32 L1=1.00 run=1 blk=0 avail=8300 (60.2%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=190 ap=49 tcp=124 topuser=madalice 2026-08-30 08:26:40 L1=1.08 run=3 blk=0 avail=7709 (56.0%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=469 ap=107 tcp=24 topuser=madalice 2026-08-30 08:26:42 L1=1.08 run=1 blk=0 avail=7862 (57.1%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=313 ap=106 tcp=23 topuser=madalice 2026-08-30 08:26:50 L1=1.07 run=1 blk=0 avail=7917 (57.5%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=313 ap=97 tcp=23 topuser=madalice 2026-08-30 08:26:52 L1=1.07 run=1 blk=0 avail=7924 (57.5%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=313 ap=96 tcp=22 topuser=madalice 2026-08-30 08:27:00 L1=0.99 run=1 blk=0 avail=7977 (57.9%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=343 ap=87 tcp=20 topuser=madalice 2026-08-30 08:27:02 L1=0.99 run=3 blk=0 avail=8110 (58.9%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=191 ap=86 tcp=19 topuser=madalice 2026-08-30 08:27:11 L1=1.07 run=2 blk=0 avail=8169 (59.3%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=191 ap=77 tcp=18 topuser=madalice 2026-08-30 08:27:12 L1=1.07 run=1 blk=0 avail=8174 (59.3%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=191 ap=76 tcp=17 topuser=madalice 2026-08-30 08:27:21 L1=0.91 run=2 blk=0 avail=8154 (59.2%) swpO=0 conn=1 myRSS=2763 php=4 phpRSS=309 ap=67 tcp=19 topuser=madalice 2026-08-30 08:27:22 L1=0.91 run=3 blk=0 avail=8039 (58.3%) swpO=0 conn=1 myRSS=2763 php=5 phpRSS=386 ap=65 tcp=22 topuser=evolution 2026-08-30 08:27:31 L1=0.84 run=1 blk=0 avail=8289 (60.2%) swpO=0 conn=1 myRSS=2763 php=3 phpRSS=191 ap=57 tcp=18 topuser=madalice 2026-08-30 08:27:32 L1=0.84 run=51 blk=2 avail=5735 (41.6%) swpO=554 conn=44 myRSS=2739 php=56 phpRSS=4341 ap=57 tcp=105 topuser=infinium