INCIDENT 2026-09-05 06:18:45 trigger: php_rss=2037MB ================================================================== load: 2.33 1.40 1.39 19/702 238455 ncpu:10 mem_avail: 6353MB/13777MB (46.1%) swap_used:2055MB swapout:528/s blocked(D):0 running:20 iowait:0.2% steal:0.0% php: 20 procs / 2037MB heaviest user: infinium (14 procs, 1588MB) apache: 19 procs tcp_estab: 44 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3098 root 249 1479 infinium 10 858 nobody 22 362 madalice 2 314 netdata 8 258 evolution 11 128 dovenull 6 65 cpanellogin 1 55 wp-toolkit 3 53 kurri 3 43 lowrange 2 30 dovecot 3 27 mailman 20 26 zabbix 1 12 mailnull 2 10 polkitd 1 7 named 1 5 nscd 1 3 dbus 1 3 --- php workers by user --- USER PROCS RSS_MB infinium 6 645 madalice 2 314 evolution 3 107 root 1 27 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5474 MB Active(file): 4806 MB Inactive(file): 718 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 823 MB CommitLimit: 10984 MB Committed_AS: 8316 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-03:56:18 4936 /usr/bin/imunify-agent-proxy 4109079 root 01:33:56 3832 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 01:33:56 575868 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3173188 12.0 Ssl 2-16:04:33 /usr/sbin/mariadbd 4109105 4109079 root 575868 14.4 Sl 01:33:56 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 192744 2.6 Ssl 2-03:56:23 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 171244 0.0 S 03:51:55 spamd child 237729 2601907 madalice 161684 11.9 S 01:23 php-fpm: pool madalice_com_au 238103 2601907 madalice 160352 5.8 S 00:41 php-fpm: pool madalice_com_au 3626973 1 root 150216 0.0 Ss 03:55:30 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 238398 237113 infinium 125504 33.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3643625 3626973 root 110576 0.0 S 03:51:55 spamd child 238446 238438 infinium 61480 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509236 509098 root 61320 0.0 Sl 8-03:59:04 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 203496 1353308 cpanellogin 57040 0.0 S 11:33 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 3127357 3127312 evolution 56640 0.0 Ss 06:18:44 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 53116 0.0 Ss 06:18:44 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 238464 237127 aaa 46432 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 41980 0.1 Ss 45-03:37:30 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41044 0.1 Sl 2-03:56:19 /usr/libexec/netdata/plugins.d/go.d.plugin 1 238402 238391 infinium 41008 29.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509266 1 root 40468 0.0 Ss 8-03:59:04 /usr/lib/systemd/systemd-journald 1469 1 root 36640 0.1 Ss 67-20:08:59 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29436 0.0 Ss 2-03:56:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3626082 1 root 29376 0.0 Ss 03:56:30 lfd - sleeping 2601907 1 root 28664 0.0 Ss 1-03:55:19 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 24668 0.0 Ss 67-20:08:59 tailwatchd 220790 506832 nobody 22748 0.0 S 05:57 /usr/sbin/httpd -k start 222058 506832 nobody 21804 0.0 S 03:49 /usr/sbin/httpd -k start 221912 506832 nobody 21648 0.0 S 04:01 /usr/sbin/httpd -k start 237113 506832 nobody 21376 0.0 S 02:33 /usr/sbin/httpd -k start 237110 506832 nobody 20784 0.0 S 02:33 /usr/sbin/httpd -k start 237076 506832 nobody 20540 0.0 S 02:36 /usr/sbin/httpd -k start 221851 506832 nobody 20240 0.0 S 04:04 /usr/sbin/httpd -k start 237121 506832 nobody 20200 0.1 S 02:32 /usr/sbin/httpd -k start 237127 506832 nobody 20188 0.0 S 02:32 /usr/sbin/httpd -k start 2602226 1 root 19860 0.1 Ssl 1-03:55:04 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 236582 506832 nobody 19748 0.0 S 03:32 /usr/sbin/httpd -k start 237131 506832 nobody 19600 0.0 S 02:32 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19348 0.0 Ss 2-03:56:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1542982 1542551 netdata 18540 2.2 Sl 2-03:56:19 /usr/libexec/netdata/plugins.d/apps.plugin 1 238290 506832 nobody 16916 0.0 S 00:14 /usr/sbin/httpd -k start 238414 506832 nobody 16796 0.0 S 00:01 /usr/sbin/httpd -k start 238415 506832 nobody 16796 0.0 S 00:01 /usr/sbin/httpd -k start 238391 506832 nobody 16768 0.0 S 00:02 /usr/sbin/httpd -k start 238438 506832 nobody 16712 0.0 S 00:00 /usr/sbin/httpd -k start 237120 506832 nobody 16292 0.0 S 02:32 /usr/sbin/httpd -k start 4020744 508511 lowrange 15792 0.0 S 02:03:06 dovecot/imap 1542141 1 root 15460 0.0 Ss 2-03:56:26 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15396 0.0 S 04:22:37 dovecot/imap 4124271 508511 kurri 15284 0.0 S 01:32:04 dovecot/imap 135837 508511 infinium 14812 0.0 S 29:16 dovecot/imap 221277 508511 infinium 14572 0.0 S 05:11 dovecot/imap 238420 508511 kurri 14528 0.0 S 00:00 dovecot/imap 3141944 508511 kurri 14352 0.0 S 06:18:22 dovecot/imap 221251 1471 root 14108 0.0 S 05:13 cPhulkd - processor - http socket 2508826 1471 root 13360 0.0 S 1-04:21:48 cPhulkd - dbprocessor 690514 508511 dovecot 13300 0.0 S 17:45:55 dovecot/auth 690505 508511 dovenull 13280 0.0 S 17:45:55 dovecot/imap-login 690509 508511 dovenull 13068 0.0 S 17:45:55 dovecot/imap-login 221674 508511 root 12892 0.0 S 04:24 dovecot/auth -w 483898 1 zabbix 12400 0.2 Ssl 8-04:00:21 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 506832 1 root 12356 0.0 Ss 8-03:59:37 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10716976 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 107 evolution/support.evolutionerp.com.au 18 infinium/infinium.net.au-ssl_log 15 madalice/madalice.com.au-ssl_log 14 evolution/portal.evolutionerp.com.au-ssl_log 12 corpkicks/corporatekicks.com.au-ssl_log 4 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 107 40.115.94.245 18 91.199.118.49 14 45.94.31.96 12 203.54.180.238 3 194.233.84.255 3 114.119.143.104 2 47.128.32.214 2 118.127.40.55 2 114.119.131.88 1 66.249.73.166 1 66.249.73.165 1 40.77.167.241 1 34.196.51.17 1 192.178.7.36 1 162.243.46.220 --- top request paths across all vhosts (last 3 min) --- 53 GET /api/getItem/LWPB2001KG 12 GET /heartbeat.php 6 GET /store/sneaker-balls/ 5 GET / 3 POST / 2 POST /wp-cron.php 2 GET /api/getItem/ML3VPA 2 GET /api/getItem/GEB12-DL 1 HEAD / 1 GET /xmlrpc.php 1 GET /wp/wp-includes/wlwmanifest.xml 1 GET /wp-json/batch/v1 1 GET /wp-includes/wlwmanifest.xml 1 GET /wp-admin/setup-config.php 1 GET /wp-admin/install.php 1 GET /wp2/wp-includes/wlwmanifest.xml 1 GET /wp1/wp-includes/wlwmanifest.xml 1 GET /wordpress/wp-includes/wlwmanifest.xml 1 GET /wordpress/wp-admin/setup-config.php 1 GET /wordpress/wp-admin/install.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 53 GET /api/getItem/LWPB2001KG 2 GET /api/getItem/ML3VPA 2 GET /api/getItem/GEB12-DL 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/S4 1 GET /api/getItem/S3 1 GET /api/getItem/S2 1 GET /api/getItem/S1 1 GET /api/getItem/PT75M 1 GET /api/getItem/PT65M -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:06:17:40 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:41 +1000] "GET /api/getItem/PC19BL HTTP/1.1" 404 108 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:41 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:41 +1000] "GET /api/getItem/IPC2525 HTTP/1.1" 200 1621 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:41 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:41 +1000] "GET /api/getItem/PT50M HTTP/1.1" 404 107 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:42 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:42 +1000] "GET /api/getItem/PT65M HTTP/1.1" 404 107 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:42 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:06:17:42 +1000] "GET /api/getItem/PT75M HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" == evolution/support.evolutionerp.com.au == -- top paths -- 3 GET / 1 GET /xmlrpc.php 1 GET /wp/wp-includes/wlwmanifest.xml 1 GET /wp-includes/wlwmanifest.xml 1 GET /wp2/wp-includes/wlwmanifest.xml 1 GET /wp1/wp-includes/wlwmanifest.xml 1 GET /wordpress/wp-includes/wlwmanifest.xml 1 GET /web/wp-includes/wlwmanifest.xml 1 GET /website/wp-includes/wlwmanifest.xml 1 GET /test/wp-includes/wlwmanifest.xml 1 GET /shop/wp-includes/wlwmanifest.xml 1 GET /news/wp-includes/wlwmanifest.xml -- last 10 requests -- 91.199.118.49 - - [05/Sep/2026:06:16:40 +1000] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/5 91.199.118.49 - - [05/Sep/2026:06:16:41 +1000] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 91.199.118.49 - - [05/Sep/2026:06:16:41 +1000] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537. 91.199.118.49 - - [05/Sep/2026:06:16:41 +1000] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537. 91.199.118.49 - - [05/Sep/2026:06:16:41 +1000] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537. 91.199.118.49 - - [05/Sep/2026:06:16:42 +1000] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537. 91.199.118.49 - - [05/Sep/2026:06:16:42 +1000] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.3 91.199.118.49 - - [05/Sep/2026:06:16:42 +1000] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537. 91.199.118.49 - - [05/Sep/2026:06:16:43 +1000] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537 91.199.118.49 - - [05/Sep/2026:06:16:43 +1000] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.3 == infinium/infinium.net.au-ssl_log == -- top paths -- 1 POST /wp-cron.php 1 GET /wp-admin/setup-config.php 1 GET /wp-admin/install.php 1 GET /wordpress/wp-admin/setup-config.php 1 GET /wordpress/wp-admin/install.php 1 GET /wordpress1/wp-admin/setup-config.php 1 GET /wordpress/ 1 GET /staging/wp-admin/setup-config.php 1 GET /staging/wp-admin/install.php 1 GET /old/wp-admin/setup-config.php 1 GET /old/ 1 GET /installer.php -- last 10 requests -- 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /wordpress/wp-admin/install.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /blog/wp-admin/setup-config.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /staging/wp-admin/install.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /wp-admin/install.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Saf 45.94.31.96 - - [05/Sep/2026:06:18:44 +1000] "GET /staging/wp-admin/setup-config.php?step=1&language=en_US HTTP/1.1" 404 68337 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /blog/wp-admin/install.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0. 45.94.31.96 - - [05/Sep/2026:06:18:44 +1000] "GET /old/wp-admin/setup-config.php?step=1&language=en_US HTTP/1.1" 404 68337 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121. 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /wp-admin/setup-config.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0. 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /wordpress1/wp-admin/setup-config.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro 45.94.31.96 - - [05/Sep/2026:06:18:43 +1000] "GET /wordpress/wp-admin/setup-config.php?step=1&language=en_US HTTP/1.1" 404 68225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom --- last 30 samples (run-up to this incident) --- 2026-09-05 06:16:21 L1=1.01 run=1 blk=1 avail=7232 (52.5%) swpO=0 conn=4 myRSS=3119 php=7 phpRSS=550 ap=42 tcp=36 topuser=madalice 2026-09-05 06:16:24 L1=1.01 run=2 blk=1 avail=7252 (52.6%) swpO=0 conn=3 myRSS=3119 php=7 phpRSS=550 ap=39 tcp=32 topuser=madalice 2026-09-05 06:16:31 L1=1.01 run=2 blk=1 avail=7305 (53.0%) swpO=0 conn=3 myRSS=3119 php=8 phpRSS=585 ap=32 tcp=32 topuser=madalice 2026-09-05 06:16:34 L1=1.09 run=1 blk=1 avail=7330 (53.2%) swpO=0 conn=3 myRSS=3119 php=7 phpRSS=549 ap=29 tcp=33 topuser=madalice 2026-09-05 06:16:41 L1=1.16 run=2 blk=1 avail=7155 (51.9%) swpO=0 conn=3 myRSS=3119 php=9 phpRSS=832 ap=22 tcp=38 topuser=madalice 2026-09-05 06:16:44 L1=1.15 run=1 blk=1 avail=7375 (53.5%) swpO=0 conn=3 myRSS=3119 php=7 phpRSS=571 ap=20 tcp=30 topuser=madalice 2026-09-05 06:16:51 L1=1.22 run=2 blk=1 avail=7321 (53.1%) swpO=0 conn=3 myRSS=3119 php=8 phpRSS=680 ap=16 tcp=32 topuser=madalice 2026-09-05 06:16:54 L1=1.28 run=1 blk=1 avail=7502 (54.5%) swpO=0 conn=3 myRSS=3119 php=6 phpRSS=445 ap=16 tcp=28 topuser=madalice 2026-09-05 06:17:01 L1=1.26 run=1 blk=1 avail=7512 (54.5%) swpO=0 conn=3 myRSS=3119 php=6 phpRSS=445 ap=15 tcp=34 topuser=madalice 2026-09-05 06:17:04 L1=1.24 run=1 blk=1 avail=7528 (54.6%) swpO=1 conn=3 myRSS=3119 php=6 phpRSS=445 ap=15 tcp=31 topuser=madalice 2026-09-05 06:17:11 L1=1.38 run=1 blk=1 avail=7520 (54.6%) swpO=1 conn=3 myRSS=3119 php=6 phpRSS=445 ap=15 tcp=30 topuser=madalice 2026-09-05 06:17:14 L1=1.35 run=2 blk=1 avail=7530 (54.7%) swpO=2 conn=3 myRSS=3119 php=6 phpRSS=445 ap=15 tcp=30 topuser=madalice 2026-09-05 06:17:22 L1=1.32 run=1 blk=1 avail=7655 (55.6%) swpO=2 conn=3 myRSS=3119 php=5 phpRSS=289 ap=15 tcp=30 topuser=madalice 2026-09-05 06:17:24 L1=1.29 run=1 blk=1 avail=7673 (55.7%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=269 ap=15 tcp=28 topuser=madalice 2026-09-05 06:17:32 L1=1.27 run=2 blk=1 avail=7651 (55.5%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=291 ap=15 tcp=30 topuser=madalice 2026-09-05 06:17:34 L1=1.25 run=3 blk=1 avail=7648 (55.5%) swpO=0 conn=3 myRSS=3119 php=6 phpRSS=323 ap=15 tcp=30 topuser=madalice 2026-09-05 06:17:42 L1=1.23 run=3 blk=1 avail=7626 (55.4%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=293 ap=15 tcp=32 topuser=madalice 2026-09-05 06:17:44 L1=1.21 run=1 blk=0 avail=7643 (55.5%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=293 ap=15 tcp=31 topuser=madalice 2026-09-05 06:17:52 L1=1.27 run=1 blk=1 avail=7644 (55.5%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=292 ap=15 tcp=31 topuser=madalice 2026-09-05 06:17:54 L1=1.25 run=1 blk=0 avail=7643 (55.5%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=292 ap=15 tcp=30 topuser=madalice 2026-09-05 06:18:02 L1=1.23 run=1 blk=0 avail=7635 (55.4%) swpO=0 conn=3 myRSS=3119 php=5 phpRSS=293 ap=15 tcp=30 topuser=madalice 2026-09-05 06:18:04 L1=1.29 run=8 blk=0 avail=7443 (54.0%) swpO=0 conn=3 myRSS=3119 php=7 phpRSS=523 ap=15 tcp=30 topuser=madalice 2026-09-05 06:18:12 L1=1.27 run=3 blk=0 avail=7515 (54.5%) swpO=0 conn=3 myRSS=3119 php=6 phpRSS=431 ap=15 tcp=31 topuser=madalice 2026-09-05 06:18:14 L1=1.25 run=1 blk=0 avail=7522 (54.6%) swpO=0 conn=3 myRSS=3119 php=6 phpRSS=424 ap=15 tcp=30 topuser=madalice 2026-09-05 06:18:22 L1=1.23 run=1 blk=0 avail=7530 (54.7%) swpO=2 conn=3 myRSS=3118 php=6 phpRSS=424 ap=15 tcp=30 topuser=madalice 2026-09-05 06:18:25 L1=1.21 run=1 blk=0 avail=7523 (54.6%) swpO=2 conn=3 myRSS=3118 php=6 phpRSS=424 ap=15 tcp=29 topuser=madalice 2026-09-05 06:18:32 L1=1.27 run=2 blk=0 avail=7495 (54.4%) swpO=1 conn=3 myRSS=3118 php=6 phpRSS=450 ap=16 tcp=33 topuser=madalice 2026-09-05 06:18:35 L1=1.25 run=1 blk=0 avail=7495 (54.4%) swpO=1 conn=3 myRSS=3118 php=6 phpRSS=450 ap=16 tcp=31 topuser=madalice 2026-09-05 06:18:42 L1=1.23 run=4 blk=0 avail=7436 (54.0%) swpO=0 conn=3 myRSS=3118 php=7 phpRSS=538 ap=16 tcp=30 topuser=madalice 2026-09-05 06:18:45 L1=2.33 run=20 blk=0 avail=6353 (46.1%) swpO=528 conn=12 myRSS=3098 php=20 phpRSS=2037 ap=19 tcp=44 topuser=infinium