INCIDENT 2026-08-31 00:15:10 trigger: php_rss=1599MB ================================================================== load: 1.49 1.09 1.12 23/682 2561892 ncpu:10 mem_avail: 7256MB/13777MB (52.7%) swap_used:2132MB swapout:0/s blocked(D):0 running:29 iowait:0.4% steal:0.0% php: 18 procs / 1599MB heaviest user: infinium (10 procs, 911MB) apache: 45 procs tcp_estab: 47 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2922 root 251 842 nobody 44 684 infinium 9 644 netdata 7 202 customc 1 157 madalice 1 155 evolution 8 96 corpkicks 1 95 mailman 20 84 cpanellogin 1 74 vinesit 1 54 dovenull 6 42 lowrange 2 29 kurri 2 25 wp-toolkit 3 24 zabbix 1 20 mailnull 1 20 dovecot 3 17 named 1 11 --- php workers by user --- USER PROCS RSS_MB infinium 8 692 customc 1 158 madalice 1 155 evolution 3 107 corpkicks 1 96 vinesit 1 58 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6436 MB Active(file): 3341 MB Inactive(file): 3340 MB Dirty: 34 MB Writeback: 0 MB SReclaimable: 507 MB CommitLimit: 10984 MB Committed_AS: 8283 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-21:56:31 4440 /usr/bin/imunify-agent-proxy 2503467 root 15:09 3100 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 2554844 root 00:10 1244 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2992660 6.8 Ssl 2-21:56:00 /usr/sbin/mariadbd 508924 1 netdata 185248 1.9 Ssl 2-21:55:29 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 889551 2277352 root 180496 0.0 S 08:09:28 spamd child 2561411 2558560 customc 161884 43.0 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2554579 510022 madalice 159380 8.2 S 00:44 php-fpm: pool madalice_com_au 2561614 2554439 infinium 122488 29.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2561609 2554225 corpkicks 120928 28.5 R 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2277352 1 root 113768 0.0 Ss 21:52:06 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2561797 2560379 infinium 102452 40.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2561801 2560371 infinium 94320 43.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2561799 2560365 infinium 92540 39.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2328311 2277352 root 82080 0.0 S 21:37:00 spamd child 2294255 1353308 cpanellogin 76216 0.0 S 01:17:46 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2561813 2554229 vinesit 73640 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2554877 2554846 evolution 71704 3.0 Ss 00:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 2561873 2560378 infinium 68644 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509640 508992 root 54780 0.0 Sl 2-21:55:24 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 2561906 2560369 customc 53660 0.0 S 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 509236 509098 root 45336 0.0 Sl 2-21:55:26 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42240 0.1 Ss 39-21:33:52 cpsrvd (SSL) - waiting for connections 2561974 2560373 evolution 40416 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2503650 1 root 37220 0.0 Ss 15:08 lfd - sleeping 509266 1 root 29876 0.0 Ss 2-21:55:26 /usr/lib/systemd/systemd-journald 2561569 2559861 infinium 27200 35.5 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1466 1 root 25724 0.0 Ss 62-14:05:21 dnsadmin - server mode 1469 1 root 23336 0.1 Ss 62-14:05:21 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2552313 506832 nobody 22848 0.0 S 04:55 /usr/sbin/httpd -k start 2537127 506832 nobody 22844 0.1 S 07:35 /usr/sbin/httpd -k start 510022 1 root 22548 0.0 Ss 2-21:55:22 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2552326 506832 nobody 21664 0.0 S 04:54 /usr/sbin/httpd -k start 2553819 506832 nobody 21632 0.0 S 02:25 /usr/sbin/httpd -k start 2552314 506832 nobody 21560 0.1 S 04:55 /usr/sbin/httpd -k start 2552329 506832 nobody 21508 0.0 S 04:54 /usr/sbin/httpd -k start 483898 1 zabbix 21456 0.2 Ssl 2-21:56:43 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2554225 506832 nobody 21124 0.0 S 01:40 /usr/sbin/httpd -k start 508720 1 mailnull 20948 0.0 Ss 2-21:55:33 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1463 1 root 20628 0.0 Ss 62-14:05:21 tailwatchd 2556227 506832 nobody 19188 0.3 S 00:08 /usr/sbin/httpd -k start 2554228 506832 nobody 19028 0.0 S 01:39 /usr/sbin/httpd -k start 2554226 506832 nobody 18692 0.0 S 01:40 /usr/sbin/httpd -k start 2554224 506832 nobody 18616 0.0 S 01:41 /usr/sbin/httpd -k start 2554439 506832 nobody 18152 0.0 S 01:04 /usr/sbin/httpd -k start 2557351 506832 nobody 17440 0.0 S 00:07 /usr/sbin/httpd -k start 2557352 506832 nobody 17408 0.0 S 00:07 /usr/sbin/httpd -k start 2558561 506832 nobody 17156 0.1 S 00:06 /usr/sbin/httpd -k start 2558560 506832 nobody 17100 0.1 S 00:06 /usr/sbin/httpd -k start 2558559 506832 nobody 17080 0.1 S 00:06 /usr/sbin/httpd -k start 2558563 506832 nobody 16988 0.4 S 00:05 /usr/sbin/httpd -k start 2559849 506832 nobody 16988 0.2 S 00:04 /usr/sbin/httpd -k start 2554229 506832 nobody 16952 0.1 S 01:39 /usr/sbin/httpd -k start 2559861 506832 nobody 16888 0.2 S 00:04 /usr/sbin/httpd -k start 2559851 506832 nobody 16804 0.2 S 00:04 /usr/sbin/httpd -k start 2538103 1471 root 16764 0.0 S 05:53 cPhulkd - dbprocessor 2559856 506832 nobody 16740 0.2 S 00:04 /usr/sbin/httpd -k start 2559865 506832 nobody 16740 0.2 S 00:04 /usr/sbin/httpd -k start 2559858 506832 nobody 16676 0.2 S 00:04 /usr/sbin/httpd -k start 2559863 506832 nobody 16612 0.2 S 00:04 /usr/sbin/httpd -k start 2554231 506832 nobody 16472 0.0 S 01:39 /usr/sbin/httpd -k start 2560369 506832 nobody 16396 0.0 S 00:03 /usr/sbin/httpd -k start 2560379 506832 nobody 16276 0.0 S 00:03 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4797218 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 100 vinesit/vinesit.com.au-ssl_log 80 infinium/infinium.net.au-ssl_log 78 evolution/pdev.evolutionerp.com.au 45 evolution/pdev.evolutionerp.com.au-ssl_log 45 vinesit/vinesit.com.au 39 evolution/portal.evolutionerp.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 1 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 118 68.155.159.216 100 40.115.94.245 89 52.139.44.162 76 93.123.109.228 14 203.54.180.238 2 118.127.40.55 1 35.189.199.76 1 205.210.31.65 1 114.119.137.101 --- top request paths across all vhosts (last 3 min) --- 14 GET /heartbeat.php 5 GET /wp-content/plugins/hellopress/wp_filemanager.php 5 GET /this_is_a_new_hello_world.php 5 GET /simple.php 5 GET /goods.php 5 GET /chosen.php 5 GET /1.php 3 GET /wp-content/languages/about.php 3 GET /wp-content/banners/about.php 3 GET /wp-admin/includes/nav.php 3 GET /radio.php 3 GET /NewFile.php/ 3 GET /makeasmtp.php 3 GET /file.php 3 GET /file88.php 3 GET /file5.php 3 GET /file17.php 3 GET /dropdown.php 3 GET /asd.php 2 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG656520 2 GET /api/getItem/SHSG656516 2 GET /api/getItem/SHSG125125508 2 GET /api/getItem/SHSG125125408 2 GET /api/getItem/SHSG100100508 2 GET /api/getItem/SHSG100100408 2 GET /api/getItem/SHSG100100308 -- last 10 requests -- 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSG100100408 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSG100100508 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSP100100608 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSG125125408 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSG125125508 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSP125125608 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:08 +1000] "GET /api/getItem/SHSP150150508 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:09 +1000] "GET /api/getItem/SHSP150150608 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:00:15:09 +1000] "GET /api/getItem/SHSP200200508 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == vinesit/vinesit.com.au-ssl_log == -- top paths -- 2 GET /wp-login.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /wp-content/languages/about.php 2 GET /wp-content/banners/about.php 2 GET /wp-admin/includes/nav.php 2 GET /wp-admin/dropdown.php 2 GET /this_is_a_new_hello_world.php 2 GET /simple.php 2 GET /NewFile.php/ 2 GET /makeasmtp.php 2 GET /lv.php 2 GET /login.php -- last 10 requests -- 68.155.159.216 - - [31/Aug/2026:00:14:43 +1000] "GET /atomlib.php HTTP/1.1" 404 27678 "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:44 +1000] "GET /lv.php HTTP/1.1" 301 - "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:45 +1000] "GET /lv.php HTTP/1.1" 404 27678 "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:46 +1000] "GET /wp-includes/Text/index.php HTTP/1.1" 403 6 "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:47 +1000] "GET /content.php HTTP/1.1" 301 - "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:47 +1000] "GET /content.php HTTP/1.1" 404 27678 "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:49 +1000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 403 12 "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:49 +1000] "GET /goat.php HTTP/1.1" 301 - "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:50 +1000] "GET /goat.php HTTP/1.1" 404 27678 "-" "-" 68.155.159.216 - - [31/Aug/2026:00:14:51 +1000] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 403 12 "-" "-" == infinium/infinium.net.au-ssl_log == -- top paths -- 1 POST /wp-cron.php 1 GET /*update.cgi* 1 GET /*/[slug] 1 GET /*/[id] 1 GET /.git-secret 1 GET /.git/ORIG_HEAD 1 GET /.git/objects/pack 1 GET /.git/objects 1 GET /.git/logs/refs/remotes/origin/master 1 GET /.git/logs/refs/remotes/origin/main 1 GET /.git/logs/refs/heads/master 1 GET /.git/logs/refs/heads/main -- last 10 requests -- 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/hooks/pre-commit HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/logs/refs/remotes/origin/main HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:127.0) Gecko/20100101 Firefox/127.0" 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/logs/refs/heads/master HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/logs/refs/remotes/origin/master HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/objects HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 93.123.109.228 - - [31/Aug/2026:00:15:09 +1000] "GET /.gitattributes HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/info/exclude HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0 93.123.109.228 - - [31/Aug/2026:00:15:08 +1000] "GET /.git/index HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [31/Aug/2026:00:15:09 +1000] "GET /.git/objects/pack HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [31/Aug/2026:00:15:09 +1000] "GET /.github/CODEOWNERS HTTP/1.1" 404 68278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" --- last 30 samples (run-up to this incident) --- 2026-08-31 00:12:49 L1=0.60 run=2 blk=0 avail=8544 (62.0%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=167 ap=17 tcp=22 topuser=madalice 2026-08-31 00:12:49 L1=0.60 run=2 blk=0 avail=8544 (62.0%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=167 ap=17 tcp=21 topuser=madalice 2026-08-31 00:12:59 L1=0.66 run=2 blk=0 avail=8517 (61.8%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=192 ap=16 tcp=24 topuser=madalice 2026-08-31 00:12:59 L1=0.66 run=1 blk=0 avail=8517 (61.8%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=192 ap=16 tcp=26 topuser=madalice 2026-08-31 00:13:09 L1=0.78 run=2 blk=0 avail=8184 (59.4%) swpO=0 conn=3 myRSS=2922 php=6 phpRSS=606 ap=16 tcp=25 topuser=corpkicks 2026-08-31 00:13:09 L1=0.78 run=2 blk=0 avail=8148 (59.1%) swpO=0 conn=1 myRSS=2922 php=6 phpRSS=638 ap=16 tcp=25 topuser=corpkicks 2026-08-31 00:13:19 L1=0.74 run=1 blk=0 avail=8414 (61.1%) swpO=0 conn=3 myRSS=2922 php=4 phpRSS=317 ap=15 tcp=22 topuser=madalice 2026-08-31 00:13:20 L1=0.74 run=1 blk=0 avail=8414 (61.1%) swpO=0 conn=1 myRSS=2922 php=4 phpRSS=317 ap=15 tcp=22 topuser=madalice 2026-08-31 00:13:29 L1=0.62 run=2 blk=0 avail=8653 (62.8%) swpO=0 conn=3 myRSS=2922 php=2 phpRSS=34 ap=15 tcp=30 topuser=root 2026-08-31 00:13:30 L1=0.62 run=1 blk=0 avail=8652 (62.8%) swpO=0 conn=1 myRSS=2922 php=2 phpRSS=34 ap=15 tcp=30 topuser=root 2026-08-31 00:13:39 L1=0.53 run=2 blk=0 avail=8453 (61.4%) swpO=0 conn=3 myRSS=2922 php=3 phpRSS=246 ap=18 tcp=23 topuser=madalice 2026-08-31 00:13:40 L1=0.53 run=2 blk=0 avail=8422 (61.1%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=276 ap=18 tcp=23 topuser=madalice 2026-08-31 00:13:49 L1=0.53 run=1 blk=0 avail=8543 (62.0%) swpO=0 conn=3 myRSS=2922 php=3 phpRSS=167 ap=16 tcp=25 topuser=madalice 2026-08-31 00:13:50 L1=0.53 run=1 blk=0 avail=8542 (62.0%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=167 ap=16 tcp=25 topuser=madalice 2026-08-31 00:14:00 L1=0.52 run=2 blk=0 avail=8517 (61.8%) swpO=0 conn=3 myRSS=2922 php=4 phpRSS=227 ap=16 tcp=26 topuser=madalice 2026-08-31 00:14:00 L1=0.52 run=2 blk=0 avail=8505 (61.7%) swpO=0 conn=1 myRSS=2922 php=4 phpRSS=234 ap=16 tcp=26 topuser=madalice 2026-08-31 00:14:10 L1=0.44 run=6 blk=1 avail=8583 (62.3%) swpO=0 conn=2 myRSS=2922 php=3 phpRSS=121 ap=17 tcp=27 topuser=vinesit 2026-08-31 00:14:10 L1=0.44 run=7 blk=0 avail=8631 (62.7%) swpO=0 conn=1 myRSS=2922 php=2 phpRSS=34 ap=17 tcp=34 topuser=root 2026-08-31 00:14:20 L1=0.52 run=2 blk=0 avail=8617 (62.5%) swpO=0 conn=2 myRSS=2922 php=3 phpRSS=99 ap=16 tcp=26 topuser=vinesit 2026-08-31 00:14:20 L1=0.52 run=2 blk=0 avail=8608 (62.5%) swpO=0 conn=1 myRSS=2922 php=3 phpRSS=109 ap=16 tcp=28 topuser=vinesit 2026-08-31 00:14:30 L1=0.52 run=2 blk=0 avail=8488 (61.6%) swpO=0 conn=2 myRSS=2922 php=4 phpRSS=246 ap=16 tcp=33 topuser=madalice 2026-08-31 00:14:30 L1=0.52 run=4 blk=0 avail=8473 (61.5%) swpO=0 conn=2 myRSS=2922 php=4 phpRSS=260 ap=16 tcp=33 topuser=madalice 2026-08-31 00:14:40 L1=0.52 run=1 blk=0 avail=8534 (61.9%) swpO=0 conn=2 myRSS=2922 php=3 phpRSS=167 ap=16 tcp=26 topuser=madalice 2026-08-31 00:14:40 L1=0.52 run=1 blk=0 avail=8534 (61.9%) swpO=0 conn=2 myRSS=2922 php=3 phpRSS=167 ap=16 tcp=26 topuser=madalice 2026-08-31 00:14:50 L1=0.44 run=2 blk=0 avail=8491 (61.6%) swpO=0 conn=2 myRSS=2922 php=4 phpRSS=249 ap=16 tcp=24 topuser=madalice 2026-08-31 00:14:50 L1=0.44 run=2 blk=0 avail=8477 (61.5%) swpO=0 conn=2 myRSS=2922 php=4 phpRSS=261 ap=16 tcp=24 topuser=madalice 2026-08-31 00:15:00 L1=0.45 run=5 blk=0 avail=8450 (61.3%) swpO=0 conn=2 myRSS=2922 php=5 phpRSS=324 ap=16 tcp=25 topuser=madalice 2026-08-31 00:15:00 L1=0.45 run=2 blk=0 avail=8514 (61.8%) swpO=0 conn=2 myRSS=2922 php=4 phpRSS=227 ap=16 tcp=25 topuser=madalice 2026-08-31 00:15:10 L1=1.49 run=29 blk=0 avail=7256 (52.7%) swpO=0 conn=11 myRSS=2922 php=18 phpRSS=1599 ap=45 tcp=47 topuser=infinium 2026-08-31 00:15:10 L1=1.49 run=25 blk=0 avail=7520 (54.6%) swpO=0 conn=2 myRSS=2922 php=15 phpRSS=1225 ap=45 tcp=44 topuser=infinium