INCIDENT 2026-08-30 13:17:21 trigger: php_rss=1900MB mysql_conn=16 ================================================================== load: 0.65 0.71 0.82 6/658 307041 ncpu:10 mem_avail: 6937MB/13777MB (50.4%) swap_used:1825MB swapout:0/s blocked(D):0 running:7 iowait:0.0% steal:0.0% php: 18 procs / 1900MB heaviest user: infinium (14 procs, 1636MB) apache: 21 procs tcp_estab: 59 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3014 infinium 15 1684 root 246 1136 nobody 20 358 netdata 7 197 madalice 1 159 mailman 20 121 tubesupplies 1 72 mailnull 3 65 cpanellogin 1 64 alison 4 56 dovenull 6 46 wp-toolkit 3 31 aaa 2 29 kurri 2 27 evolution 5 22 lowrange 1 21 zabbix 1 20 dovecot 3 19 named 1 15 --- php workers by user --- USER PROCS RSS_MB infinium 14 1671 madalice 1 159 tubesupplies 1 73 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5193 MB Active(file): 4707 MB Inactive(file): 906 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 601 MB CommitLimit: 10984 MB Committed_AS: 8538 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-10:58:42 7704 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3086720 7.3 Ssl 2-10:58:11 /usr/sbin/mariadbd 2328310 2277352 root 208180 0.0 S 10:39:11 spamd child 508924 1 netdata 177916 1.9 Ssl 2-10:57:40 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175488 0.0 Ss 10:54:17 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 164924 0.0 S 10:39:11 spamd child 306455 510022 madalice 163416 9.5 S 01:11 php-fpm: pool madalice_com_au 509266 1 root 149152 0.0 Ss 2-10:57:37 /usr/lib/systemd/systemd-journald 306984 289879 infinium 127028 51.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306989 293915 infinium 127020 53.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306987 289613 infinium 127012 52.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306983 289880 infinium 126796 52.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306986 306968 infinium 126660 46.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306982 289872 infinium 126608 51.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306990 274709 infinium 126604 48.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306988 273854 infinium 126464 47.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306985 273356 infinium 126420 48.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306996 306976 infinium 125436 44.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306995 306977 infinium 125292 47.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306998 306992 infinium 119920 44.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306999 306993 infinium 113816 39.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 307000 306991 infinium 113620 41.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 306997 306994 tubesupplies 81200 49.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4027958 1353308 cpanellogin 65796 0.0 S 02:19:08 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 509236 509098 root 52956 0.0 Sl 2-10:57:37 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 49156 0.0 Sl 2-10:57:35 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42532 0.1 Ss 39-10:36:03 cpsrvd (SSL) - waiting for connections 2275833 1 root 35932 0.0 Ss 10:55:07 lfd - sleeping 508720 1 mailnull 25296 0.0 Ss 2-10:57:44 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1469 1 root 24040 0.1 Ss 62-03:07:32 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23344 0.0 Ss 2-10:57:33 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 273356 506832 nobody 23228 0.0 S 10:25 /usr/sbin/httpd -k start 289872 506832 nobody 22488 0.1 S 04:58 /usr/sbin/httpd -k start 274709 506832 nobody 22468 0.0 S 08:03 /usr/sbin/httpd -k start 252777 508511 lowrange 22276 0.0 S 17:11 dovecot/imap 273854 506832 nobody 22024 0.1 S 09:32 /usr/sbin/httpd -k start 1463 1 root 21968 0.0 Ss 62-03:07:32 tailwatchd 293915 506832 nobody 21400 0.0 S 02:17 /usr/sbin/httpd -k start 289879 506832 nobody 21280 0.2 S 04:57 /usr/sbin/httpd -k start 289613 506832 nobody 21088 0.1 S 05:33 /usr/sbin/httpd -k start 483898 1 zabbix 21080 0.2 Ssl 2-10:58:54 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 289880 506832 nobody 20988 0.0 S 04:57 /usr/sbin/httpd -k start 306913 508720 mailnull 20940 0.0 S 00:15 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 306967 508720 mailnull 20940 0.0 S 00:07 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 291020 506832 nobody 20540 0.3 S 02:35 /usr/sbin/httpd -k start 290553 506832 nobody 20104 0.1 S 03:45 /usr/sbin/httpd -k start 305763 506832 nobody 19640 0.0 S 01:44 /usr/sbin/httpd -k start 306968 506832 nobody 19464 0.0 S 00:03 /usr/sbin/httpd -k start 306976 506832 nobody 19464 0.5 S 00:02 /usr/sbin/httpd -k start 306977 506832 nobody 19464 0.5 S 00:02 /usr/sbin/httpd -k start 252788 508511 infinium 19256 0.0 S 17:11 dovecot/imap 938582 1 wp-toolkit 18068 0.0 Ss 2-09:05:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1471 1 root 16968 0.0 Ss 62-03:07:32 cPhulkd - processor 3446928 1471 root 16856 0.0 S 05:11:32 cPhulkd - dbprocessor 306991 506832 nobody 16496 0.0 S 00:01 /usr/sbin/httpd -k start 305456 1471 root 16480 0.0 S 01:53 cPhulkd - processor - http socket 306994 506832 nobody 16472 0.0 S 00:01 /usr/sbin/httpd -k start 306992 506832 nobody 16432 0.0 S 00:01 /usr/sbin/httpd -k start 306993 506832 nobody 16432 0.0 S 00:01 /usr/sbin/httpd -k start 3960981 508511 kurri 15864 0.0 S 02:37:27 dovecot/imap 509671 508992 netdata 15780 2.1 Sl 2-10:57:35 /usr/libexec/netdata/plugins.d/apps.plugin 1 --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4515531 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 1073 infinium/infinium.net.au-ssl_log 26 evolution/portal.evolutionerp.com.au-ssl_log 24 alison/alisonarts.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 2 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 1073 40.115.94.245 24 203.54.180.238 14 178.16.55.109 8 91.226.251.15 4 118.127.40.55 3 8.212.162.181 3 103.190.47.42 2 50.6.169.131 2 168.63.79.147 2 112.78.134.58 1 91.92.243.251 1 50.87.179.84 1 114.119.143.14 1 114.119.143.104 --- top request paths across all vhosts (last 3 min) --- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 24 GET /heartbeat.php 13 POST /index.php 12 GET /wp-login.php 9 GET /api/getItem/NA 4 POST /wp-login.php 4 POST /wp-cron.php 4 GET /api/getItem/PWFBW3151KG 3 GET /wp-json/wp/v2/users/me 2 GET /store/design-your-own-kids-shoes/ 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG757540-8 --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/RGW90 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/RGW100 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/RGW120 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/RGW160 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/RGW117T HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/RGW80 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/GP150x200x8 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/K125MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/253-40SP HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:13:16:12 +1000] "GET /api/getItem/300558 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == infinium/infinium.net.au-ssl_log == -- top paths -- 12 GET /wp-login.php 4 POST /wp-login.php 4 POST /wp-cron.php 3 GET /wp-json/wp/v2/users/me 1 POST /wp-comments-post.php 1 GET /wp-json/wp/v2/posts 1 GET /wp-json/wp/v2/comments -- last 10 requests -- 8.212.162.181 - - [30/Aug/2026:13:17:04 +1000] "POST /wp-comments-post.php HTTP/1.1" 302 - "https://infinium.net.au" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0" 8.212.162.181 - - [30/Aug/2026:13:17:05 +1000] "GET /wp-json/wp/v2/comments?post=2087&search=kingphapp&per_page=20&_fields=id%2Cpost%2Cauthor_name%2Cauthor_url%2Ccontent%2Clink HTTP/1.1" 200 537 "https://infinium.net.au" 91.226.251.15 - - [30/Aug/2026:13:17:19 +1000] "GET /wp-login.php HTTP/1.1" 200 2025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:19 +1000] "GET /wp-login.php HTTP/1.1" 200 2026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:19 +1000] "GET /wp-login.php HTTP/1.1" 200 2025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:19 +1000] "GET /wp-login.php HTTP/1.1" 200 2026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:19 +1000] "GET /wp-login.php HTTP/1.1" 200 2025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:20 +1000] "GET /wp-login.php HTTP/1.1" 200 2027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:20 +1000] "GET /wp-login.php HTTP/1.1" 200 2027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 91.226.251.15 - - [30/Aug/2026:13:17:19 +1000] "GET /wp-login.php HTTP/1.1" 200 2027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 24 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:13:16:13 +1000] "GET /heartbeat.php?sentAt=1788059773&bytes=106,147,160,125&_=1787897056628 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:13 +1000] "GET /heartbeat.php?sentAt=1788059773&bytes=106,147,160,125&_=1787918095113 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:23 +1000] "GET /heartbeat.php?sentAt=1788059783&bytes=106,147,160,135&_=1787897056629 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:23 +1000] "GET /heartbeat.php?sentAt=1788059783&bytes=106,147,160,135&_=1787918095114 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:33 +1000] "GET /heartbeat.php?sentAt=1788059793&bytes=106,147,160,145&_=1787897056630 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:33 +1000] "GET /heartbeat.php?sentAt=1788059793&bytes=106,147,160,145&_=1787918095115 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:43 +1000] "GET /heartbeat.php?sentAt=1788059803&bytes=106,147,160,155&_=1787897056631 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:43 +1000] "GET /heartbeat.php?sentAt=1788059803&bytes=106,147,160,155&_=1787918095116 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:53 +1000] "GET /heartbeat.php?sentAt=1788059813&bytes=106,147,160,165&_=1787897056632 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:13:16:53 +1000] "GET /heartbeat.php?sentAt=1788059813&bytes=106,147,160,165&_=1787918095117 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-30 13:14:51 L1=0.31 run=2 blk=0 avail=8250 (59.9%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=260 ap=14 tcp=23 topuser=madalice 2026-08-30 13:15:01 L1=0.26 run=2 blk=0 avail=8302 (60.3%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=168 ap=14 tcp=22 topuser=madalice 2026-08-30 13:15:01 L1=0.26 run=3 blk=0 avail=8303 (60.3%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=168 ap=14 tcp=23 topuser=madalice 2026-08-30 13:15:11 L1=0.52 run=5 blk=0 avail=8193 (59.5%) swpO=0 conn=1 myRSS=3014 php=5 phpRSS=324 ap=15 tcp=26 topuser=madalice 2026-08-30 13:15:11 L1=0.52 run=5 blk=0 avail=8171 (59.3%) swpO=0 conn=1 myRSS=3014 php=5 phpRSS=351 ap=15 tcp=26 topuser=madalice 2026-08-30 13:15:21 L1=0.52 run=3 blk=0 avail=8231 (59.7%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=261 ap=15 tcp=26 topuser=madalice 2026-08-30 13:15:21 L1=0.52 run=3 blk=0 avail=8227 (59.7%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=261 ap=15 tcp=26 topuser=madalice 2026-08-30 13:15:31 L1=0.59 run=2 blk=0 avail=8278 (60.1%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=216 ap=14 tcp=27 topuser=madalice 2026-08-30 13:15:31 L1=0.59 run=3 blk=0 avail=8267 (60.0%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=191 ap=14 tcp=27 topuser=madalice 2026-08-30 13:15:41 L1=0.82 run=1 blk=0 avail=8273 (60.1%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=204 ap=15 tcp=28 topuser=madalice 2026-08-30 13:15:41 L1=0.82 run=2 blk=0 avail=8261 (60.0%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=191 ap=15 tcp=28 topuser=madalice 2026-08-30 13:15:51 L1=0.92 run=4 blk=0 avail=8225 (59.7%) swpO=0 conn=2 myRSS=3014 php=5 phpRSS=305 ap=15 tcp=28 topuser=madalice 2026-08-30 13:15:51 L1=0.92 run=2 blk=0 avail=8202 (59.5%) swpO=0 conn=1 myRSS=3014 php=5 phpRSS=305 ap=15 tcp=27 topuser=madalice 2026-08-30 13:16:01 L1=1.09 run=4 blk=0 avail=8169 (59.3%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=315 ap=15 tcp=28 topuser=alison 2026-08-30 13:16:01 L1=1.09 run=3 blk=0 avail=8284 (60.1%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=205 ap=15 tcp=27 topuser=madalice 2026-08-30 13:16:11 L1=1.00 run=4 blk=0 avail=8308 (60.3%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=183 ap=15 tcp=27 topuser=madalice 2026-08-30 13:16:11 L1=1.00 run=4 blk=0 avail=8246 (59.9%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=206 ap=15 tcp=27 topuser=madalice 2026-08-30 13:16:21 L1=1.08 run=2 blk=0 avail=8204 (59.6%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=294 ap=15 tcp=25 topuser=madalice 2026-08-30 13:16:21 L1=1.08 run=3 blk=0 avail=8269 (60.0%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=227 ap=15 tcp=25 topuser=madalice 2026-08-30 13:16:31 L1=0.91 run=2 blk=0 avail=8206 (59.6%) swpO=0 conn=2 myRSS=3014 php=3 phpRSS=263 ap=15 tcp=29 topuser=madalice 2026-08-30 13:16:31 L1=0.91 run=1 blk=0 avail=8269 (60.0%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=191 ap=15 tcp=29 topuser=madalice 2026-08-30 13:16:41 L1=0.77 run=1 blk=0 avail=8272 (60.0%) swpO=0 conn=2 myRSS=3014 php=3 phpRSS=191 ap=15 tcp=28 topuser=madalice 2026-08-30 13:16:41 L1=0.77 run=1 blk=0 avail=8270 (60.0%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=191 ap=15 tcp=27 topuser=madalice 2026-08-30 13:16:51 L1=0.65 run=2 blk=0 avail=8205 (59.6%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=300 ap=14 tcp=27 topuser=madalice 2026-08-30 13:16:51 L1=0.65 run=2 blk=0 avail=8142 (59.1%) swpO=0 conn=1 myRSS=3014 php=5 phpRSS=387 ap=14 tcp=29 topuser=infinium 2026-08-30 13:17:01 L1=0.62 run=1 blk=0 avail=8277 (60.1%) swpO=0 conn=2 myRSS=3014 php=3 phpRSS=196 ap=14 tcp=27 topuser=madalice 2026-08-30 13:17:01 L1=0.62 run=1 blk=0 avail=8276 (60.1%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=196 ap=14 tcp=27 topuser=madalice 2026-08-30 13:17:11 L1=0.68 run=1 blk=0 avail=8276 (60.1%) swpO=0 conn=2 myRSS=3014 php=3 phpRSS=196 ap=14 tcp=27 topuser=madalice 2026-08-30 13:17:11 L1=0.68 run=1 blk=0 avail=8275 (60.1%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=196 ap=14 tcp=27 topuser=madalice 2026-08-30 13:17:21 L1=0.65 run=7 blk=0 avail=6937 (50.4%) swpO=0 conn=16 myRSS=3014 php=18 phpRSS=1900 ap=21 tcp=59 topuser=infinium