INCIDENT 2026-08-30 08:58:26 trigger: php_rss=2524MB ================================================================== load: 2.22 0.90 0.90 18/675 3619802 ncpu:10 mem_avail: 6360MB/13777MB (46.2%) swap_used:1857MB swapout:0/s blocked(D):0 running:21 iowait:0.1% steal:0.0% php: 24 procs / 2524MB heaviest user: infinium (19 procs, 2026MB) apache: 36 procs tcp_estab: 138 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2828 infinium 15 1138 root 246 1092 nobody 35 544 madalice 3 462 netdata 7 195 mailman 20 121 cpanellogin 1 73 mailnull 3 65 dovenull 6 46 wp-toolkit 3 31 candyfabcom 2 28 kurri 2 26 evolution 5 22 zabbix 1 21 dovecot 3 19 named 1 15 lowrange 1 14 alison 1 14 polkitd 1 5 --- php workers by user --- USER PROCS RSS_MB infinium 8 808 madalice 3 462 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4833 MB Active(file): 4341 MB Inactive(file): 899 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 607 MB CommitLimit: 10984 MB Committed_AS: 7992 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-06:39:46 7724 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2896828 7.5 Ssl 2-06:39:16 /usr/sbin/mariadbd 2328310 2277352 root 187856 0.0 S 06:20:16 spamd child 508924 1 netdata 175836 1.9 Ssl 2-06:38:45 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175580 0.0 Ss 06:35:22 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 167656 0.0 S 06:20:16 spamd child 3619265 510022 madalice 159956 5.4 S 00:41 php-fpm: pool madalice_com_au 3619266 510022 madalice 158148 5.4 S 00:41 php-fpm: pool madalice_com_au 3619267 510022 madalice 155956 5.7 S 00:41 php-fpm: pool madalice_com_au 509266 1 root 140928 0.0 Ss 2-06:38:42 /usr/lib/systemd/systemd-journald 3619726 3619144 infinium 127072 24.5 S 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3619748 3619679 infinium 126616 50.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3619744 3603843 infinium 126300 25.5 S 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3619736 3619334 infinium 126224 24.5 S 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3619745 3619304 infinium 103236 21.0 S 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3619753 3619336 infinium 102400 41.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3397810 1353308 cpanellogin 75072 0.0 S 01:04:34 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 3603166 1353308 infinium 55876 0.0 S 04:46 webmaild - serving 1.41.252.211 509236 509098 root 52820 0.0 Sl 2-06:38:42 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 46528 0.0 Sl 2-06:38:40 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42188 0.1 Ss 39-06:17:08 cpsrvd (SSL) - waiting for connections 2275833 1 root 35880 0.0 Ss 06:36:12 lfd - sleeping 3603170 938407 infinium 27448 0.0 S 04:46 php-fpm: pool user_infinium 508720 1 mailnull 25296 0.0 Ss 2-06:38:49 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1469 1 root 23996 0.1 Ss 61-22:48:37 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23336 0.0 Ss 2-06:38:38 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3619144 506832 nobody 22456 0.1 S 01:01 /usr/sbin/httpd -k start 1463 1 root 21956 0.0 Ss 61-22:48:37 tailwatchd 3603843 506832 nobody 21940 0.0 S 03:36 /usr/sbin/httpd -k start 3619178 506832 nobody 21856 0.1 S 00:55 /usr/sbin/httpd -k start 483898 1 zabbix 21852 0.2 Ssl 2-06:39:59 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3619471 506832 nobody 21384 0.0 S 00:24 /usr/sbin/httpd -k start 3619336 506832 nobody 21376 0.1 S 00:38 /usr/sbin/httpd -k start 3618562 506832 nobody 21128 0.0 S 02:02 /usr/sbin/httpd -k start 3619181 506832 nobody 21100 0.1 S 00:54 /usr/sbin/httpd -k start 3619304 506832 nobody 21080 0.1 S 00:40 /usr/sbin/httpd -k start 3619560 508720 mailnull 20940 0.0 S 00:14 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3619754 508720 mailnull 20940 0.0 S 00:01 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3619332 506832 nobody 20588 0.0 S 00:38 /usr/sbin/httpd -k start 3619326 506832 nobody 20556 0.1 S 00:39 /usr/sbin/httpd -k start 3619330 506832 nobody 20528 0.0 S 00:38 /usr/sbin/httpd -k start 3619334 506832 nobody 20524 0.0 S 00:38 /usr/sbin/httpd -k start 3619621 506832 nobody 19912 0.1 S 00:10 /usr/sbin/httpd -k start 3619521 506832 nobody 19816 0.0 S 00:19 /usr/sbin/httpd -k start 3619623 506832 nobody 19768 0.2 S 00:09 /usr/sbin/httpd -k start 3619714 506832 nobody 19600 0.3 S 00:03 /usr/sbin/httpd -k start 3619730 506832 nobody 19596 0.0 S 00:02 /usr/sbin/httpd -k start 3619733 506832 nobody 19596 0.0 S 00:02 /usr/sbin/httpd -k start 3619731 506832 nobody 19476 0.0 S 00:02 /usr/sbin/httpd -k start 3619732 506832 nobody 19476 0.0 S 00:02 /usr/sbin/httpd -k start 3619713 506832 nobody 19472 0.3 S 00:03 /usr/sbin/httpd -k start 3619679 506832 nobody 19468 0.0 S 00:04 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18068 0.0 Ss 2-04:46:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3446928 1471 root 16664 0.0 S 52:37 cPhulkd - dbprocessor 3619624 506832 nobody 16312 0.3 S 00:09 /usr/sbin/httpd -k start 3619627 506832 nobody 16084 0.0 S 00:08 /usr/sbin/httpd -k start 509671 508992 netdata 15760 2.1 Sl 2-06:38:40 /usr/libexec/netdata/plugins.d/apps.plugin 1 508634 1 named 15604 0.0 Ssl 2-06:38:50 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1471 1 root 15512 0.0 Ss 61-22:48:37 cPhulkd - processor 3618416 1471 root 15456 0.0 S 02:23 cPhulkd - processor - http socket 3567470 508511 alison 15312 0.0 S 15:38 dovecot/imap --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4417096 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 4417074 | infinium_wp754 | infinium_wp754 | Query | 0 | Opening tables | SHOW FULL COLUMNS FROM `wpnb_wfhits` | +---------+----------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min tubesupplies/tubesupplies.com.au-ssl_log 261 olympic/olympicfencing.com.au-ssl_log 140 kamcool/kamcool.com.au 120 evolution/my.evolutionerp.com.au-ssl_log 47 otter2/otterfencing.net.au-ssl_log 35 infinium/infinium.net.au-ssl_log 30 evolution/portal.evolutionerp.com.au-ssl_log 22 aaa/aaadownunder.com.au-ssl_log 10 madalice/madalice.com.au-ssl_log 9 evolution/evolutionerp.com.au-ssl_log 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 261 34.101.36.207 129 35.240.161.134 120 68.155.159.216 46 101.182.108.127 35 158.23.184.117 30 162.241.203.42 22 203.54.180.238 7 118.127.40.55 6 51.15.217.215 5 146.70.36.124 2 91.92.243.234 2 50.6.200.195 2 114.119.143.104 2 114.119.131.88 1 52.167.144.158 --- top request paths across all vhosts (last 3 min) --- 22 GET /wp-login.php 22 GET /heartbeat.php 13 POST /wp-login.php 11 GET /app/ajax.php 6 POST /quoteditsave.php 6 GET /plugins/fensa/fensa-ajax.php 5 POST /wp-cron.php 5 POST / 5 GET /store/cow-print-af1/ 5 GET / 4 POST /itemModify.php 4 POST /functions.php 4 GET /index.php 3 POST /plugins/csvexporter/plugin.php 3 POST /app/ajax/selectFilter.php 3 GET /robots.txt 2 POST /wp-admin/admin-ajax.php 2 POST /plugins/oncosts/oncosts.php 2 POST /app/ajax/selectFilterSingle.php 2 POST /app/ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 4 POST / 1 GET /zend/.env 1 GET /yii/.env 1 GET /www/phpinfo.php 1 GET /www/.env 1 GET /wp/.env 1 GET /wp-admin/phpinfo.php 1 GET /worker/.env 1 GET /wordpress/.env 1 GET /webroot/index.php/_environment 1 GET /webmail/phpinfo.php 1 GET /web/.env -- last 10 requests -- 34.101.36.207 - - [30/Aug/2026:08:58:09 +1000] "GET /preview/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:09 +1000] "GET /www/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /htdocs/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /public_html/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /site/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /docs/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /wp-admin/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /administrator/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /core/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.36.207 - - [30/Aug/2026:08:58:10 +1000] "GET /includes/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 3 POST /wp-login.php 3 GET /wp-login.php 3 GET / 2 GET /@fs/proc/self/environ 1 GET /wp-includes/images/wp-includes/ 1 GET /wp-includes/images/1/ 1 GET /wp-includes/images/ 1 GET /wp-includes/http.php 1 GET /wp-includes/html-api/html5-named-character-references.php 1 GET /web/.env 1 GET /@vite/env 1 GET /v2/.env -- last 10 requests -- 162.241.203.42 - - [30/Aug/2026:08:58:12 +1000] "POST /wp-login.php HTTP/1.1" 200 1760 "https://olympicfencing.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome 162.241.203.42 - - [30/Aug/2026:08:58:12 +1000] "POST /wp-login.php HTTP/1.1" 200 1728 "https://olympicfencing.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome 162.241.203.42 - - [30/Aug/2026:08:58:12 +1000] "POST /wp-login.php HTTP/1.1" 200 1729 "https://olympicfencing.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /.kube/config HTTP/1.1" 401 53 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@anthropic. 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /api/config HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.1878.46 Safari/537.36; compatible; m 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /api/settings HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /api/env HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /api/v1/settings HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /api/v1/config HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 35.240.161.134 - - [30/Aug/2026:08:58:16 +1000] "GET /api/v1/env HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_7) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.link == kamcool/kamcool.com.au == -- top paths -- 2 GET /dropdown.php 1 GET /xmlrpc.php 1 GET /wzy.php 1 GET /ws.php 1 GET /wp-mail.php 1 GET /wp-login.php 1 GET /wp-l0gin.php 1 GET /wp-includes/widgets/index.php 1 GET /wp-includes/Text/index.php 1 GET /wp-includes/Text/Diff/index.php 1 GET /wp-includes/Text/about.php 1 GET /wp-includes/sitemaps/providers/index.php -- last 10 requests -- 68.155.159.216 - - [30/Aug/2026:08:56:42 +1000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:43 +1000] "GET /wp-content/themes/themes/Cyb3r.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:43 +1000] "GET /wp-content/plugins/plugins/Cyb3r.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:43 +1000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:43 +1000] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:43 +1000] "GET /packed.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:44 +1000] "GET /wp-content/packed.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:44 +1000] "GET /wp-l0gin.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:44 +1000] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [30/Aug/2026:08:56:44 +1000] "GET /ioxi002.PhP7 HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-30 08:55:59 L1=0.37 run=1 blk=0 avail=8471 (61.5%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=191 ap=18 tcp=26 topuser=madalice 2026-08-30 08:56:05 L1=0.34 run=1 blk=0 avail=8488 (61.6%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=168 ap=18 tcp=29 topuser=madalice 2026-08-30 08:56:09 L1=0.31 run=1 blk=0 avail=8488 (61.6%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=168 ap=18 tcp=25 topuser=madalice 2026-08-30 08:56:15 L1=0.37 run=3 blk=0 avail=8442 (61.3%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=275 ap=17 tcp=31 topuser=madalice 2026-08-30 08:56:19 L1=0.42 run=5 blk=0 avail=8396 (60.9%) swpO=0 conn=1 myRSS=2828 php=9 phpRSS=410 ap=18 tcp=32 topuser=evolution 2026-08-30 08:56:25 L1=0.47 run=1 blk=0 avail=8446 (61.3%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=190 ap=21 tcp=27 topuser=madalice 2026-08-30 08:56:29 L1=0.43 run=1 blk=0 avail=8445 (61.3%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=191 ap=21 tcp=28 topuser=madalice 2026-08-30 08:56:35 L1=0.47 run=1 blk=0 avail=8464 (61.4%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=191 ap=18 tcp=30 topuser=madalice 2026-08-30 08:56:39 L1=0.52 run=1 blk=0 avail=8463 (61.4%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=191 ap=18 tcp=30 topuser=madalice 2026-08-30 08:56:45 L1=0.60 run=4 blk=0 avail=8431 (61.2%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=297 ap=16 tcp=29 topuser=madalice 2026-08-30 08:56:49 L1=0.60 run=1 blk=0 avail=8124 (59.0%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=566 ap=19 tcp=31 topuser=madalice 2026-08-30 08:56:55 L1=0.50 run=1 blk=0 avail=8231 (59.7%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=458 ap=19 tcp=28 topuser=madalice 2026-08-30 08:56:59 L1=0.50 run=2 blk=0 avail=8196 (59.5%) swpO=0 conn=1 myRSS=2828 php=6 phpRSS=524 ap=18 tcp=26 topuser=madalice 2026-08-30 08:57:05 L1=0.51 run=2 blk=0 avail=8151 (59.2%) swpO=0 conn=3 myRSS=2828 php=7 phpRSS=643 ap=14 tcp=26 topuser=madalice 2026-08-30 08:57:09 L1=0.51 run=2 blk=0 avail=8021 (58.2%) swpO=0 conn=1 myRSS=2828 php=7 phpRSS=774 ap=14 tcp=29 topuser=madalice 2026-08-30 08:57:15 L1=0.50 run=1 blk=0 avail=8388 (60.9%) swpO=0 conn=3 myRSS=2828 php=4 phpRSS=321 ap=14 tcp=27 topuser=madalice 2026-08-30 08:57:19 L1=0.50 run=2 blk=0 avail=8338 (60.5%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=392 ap=15 tcp=28 topuser=madalice 2026-08-30 08:57:25 L1=0.43 run=3 blk=0 avail=8360 (60.7%) swpO=0 conn=3 myRSS=2828 php=4 phpRSS=321 ap=16 tcp=29 topuser=madalice 2026-08-30 08:57:29 L1=0.43 run=1 blk=0 avail=8374 (60.8%) swpO=0 conn=1 myRSS=2828 php=4 phpRSS=321 ap=16 tcp=24 topuser=madalice 2026-08-30 08:57:35 L1=0.43 run=3 blk=0 avail=8450 (61.3%) swpO=0 conn=3 myRSS=2828 php=4 phpRSS=241 ap=19 tcp=29 topuser=madalice 2026-08-30 08:57:39 L1=0.43 run=1 blk=0 avail=8441 (61.3%) swpO=0 conn=1 myRSS=2828 php=3 phpRSS=168 ap=19 tcp=42 topuser=madalice 2026-08-30 08:57:45 L1=0.45 run=5 blk=0 avail=8398 (61.0%) swpO=0 conn=3 myRSS=2828 php=6 phpRSS=335 ap=17 tcp=33 topuser=madalice 2026-08-30 08:57:49 L1=0.45 run=1 blk=0 avail=8058 (58.5%) swpO=0 conn=1 myRSS=2828 php=6 phpRSS=581 ap=32 tcp=50 topuser=madalice 2026-08-30 08:57:55 L1=0.38 run=1 blk=0 avail=8094 (58.7%) swpO=0 conn=3 myRSS=2828 php=6 phpRSS=581 ap=26 tcp=28 topuser=madalice 2026-08-30 08:57:59 L1=0.38 run=1 blk=0 avail=8091 (58.7%) swpO=0 conn=1 myRSS=2828 php=6 phpRSS=610 ap=23 tcp=29 topuser=madalice 2026-08-30 08:58:06 L1=0.32 run=1 blk=0 avail=8038 (58.3%) swpO=0 conn=1 myRSS=2828 php=6 phpRSS=610 ap=21 tcp=26 topuser=madalice 2026-08-30 08:58:09 L1=0.32 run=1 blk=0 avail=8107 (58.8%) swpO=0 conn=1 myRSS=2828 php=6 phpRSS=610 ap=20 tcp=28 topuser=madalice 2026-08-30 08:58:16 L1=0.27 run=2 blk=0 avail=8269 (60.0%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=454 ap=17 tcp=25 topuser=madalice 2026-08-30 08:58:19 L1=0.27 run=2 blk=0 avail=8128 (59.0%) swpO=0 conn=1 myRSS=2828 php=5 phpRSS=554 ap=24 tcp=28 topuser=madalice 2026-08-30 08:58:26 L1=2.22 run=21 blk=0 avail=6360 (46.2%) swpO=0 conn=14 myRSS=2828 php=24 phpRSS=2524 ap=36 tcp=138 topuser=infinium