INCIDENT 2026-09-06 20:53:32 trigger: php_rss=1716MB ================================================================== load: 3.55 2.80 2.61 6/695 3960638 ncpu:10 mem_avail: 8482MB/13777MB (61.6%) swap_used:2411MB swapout:22/s blocked(D):1 running:6 iowait:5.6% steal:0.0% php: 14 procs / 1716MB heaviest user: madalice (9 procs, 1566MB) apache: 38 procs tcp_estab: 53 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 9 1600 mysql 1 1493 root 253 842 nobody 37 638 netdata 8 239 tubesupplies 1 131 mailman 20 117 wp-toolkit 3 56 dovenull 6 55 cpanellogin 1 47 dovecot 3 23 mailnull 2 21 candyfabcom 1 14 aaa 1 14 named 1 13 zabbix 1 10 evolution 11 10 polkitd 1 9 kurri 1 9 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 9 1609 tubesupplies 1 69 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7839 MB Active(file): 3960 MB Inactive(file): 4022 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 531 MB CommitLimit: 10984 MB Committed_AS: 9367 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 5-18:31:07 5680 /usr/bin/imunify-agent-proxy 4109079 root 1-16:08:45 1752 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-16:08:45 82708 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1528908 3.0 Ssl 1-01:17:02 /usr/sbin/mariadbd 3960476 167896 madalice 224536 65.5 R 00:14 php-fpm: pool madalice_com_au 3960477 167896 madalice 223552 65.4 R 00:14 php-fpm: pool madalice_com_au 3960598 167896 madalice 222788 80.3 R 00:03 php-fpm: pool madalice_com_au 3960607 167896 madalice 203100 108 R 00:01 php-fpm: pool madalice_com_au 166870 1 netdata 180748 2.6 Ssl 18:31:13 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3959364 167896 madalice 160156 16.5 S 02:16 php-fpm: pool madalice_com_au 3960475 167896 madalice 159324 59.5 S 00:14 php-fpm: pool madalice_com_au 3960474 167896 madalice 159288 60.3 S 00:14 php-fpm: pool madalice_com_au 3960478 167896 madalice 158688 60.8 S 00:14 php-fpm: pool madalice_com_au 3960553 167896 madalice 158648 60.1 S 00:08 php-fpm: pool madalice_com_au 220207 168913 root 157704 0.0 S 18:15:15 spamd child 167871 1 root 112648 0.0 Ss 18:31:06 /usr/lib/systemd/systemd-journald 168913 1 root 94928 0.0 Ss 18:30:03 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4109105 4109079 root 82708 1.4 Sl 1-16:08:45 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 3944189 1353308 cpanellogin 48492 0.1 S 03:49 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 2902970 168913 root 43232 0.0 S 05:11:58 spamd child 1469 1 root 41664 0.1 Ss 69-10:43:48 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41584 0.1 Ss 46-18:12:19 cpsrvd (SSL) - waiting for connections 167562 166914 netdata 38132 0.1 Sl 18:31:08 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34868 0.0 Sl 9-18:33:53 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31852 0.0 Ss 18:31:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1463 1 root 24332 0.0 Ss 69-10:43:48 tailwatchd 167896 1 root 23960 0.0 Ss 18:31:05 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3942898 506832 nobody 22460 0.0 S 06:12 /usr/sbin/httpd -k start 3944006 506832 nobody 21968 0.1 S 04:04 /usr/sbin/httpd -k start 3943504 506832 nobody 21828 0.0 S 05:07 /usr/sbin/httpd -k start 3959420 506832 nobody 21520 0.1 S 02:10 /usr/sbin/httpd -k start 3959931 506832 nobody 21124 0.1 S 01:09 /usr/sbin/httpd -k start 3959938 506832 nobody 21012 0.1 S 01:08 /usr/sbin/httpd -k start 3959426 506832 nobody 20872 0.0 S 02:09 /usr/sbin/httpd -k start 3943745 506832 nobody 20512 0.1 S 04:34 /usr/sbin/httpd -k start 3959645 506832 nobody 20172 0.0 S 01:41 /usr/sbin/httpd -k start 3944008 506832 nobody 20140 0.1 S 04:04 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19684 0.0 Ss 18:31:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3960494 506832 nobody 19464 0.2 S 00:11 /usr/sbin/httpd -k start 3960547 506832 nobody 19460 0.3 S 00:08 /usr/sbin/httpd -k start 3959638 506832 nobody 19424 0.1 S 01:42 /usr/sbin/httpd -k start 3959937 506832 nobody 18764 0.0 S 01:08 /usr/sbin/httpd -k start 3960544 506832 nobody 18420 0.3 S 00:08 /usr/sbin/httpd -k start 3960597 506832 nobody 18412 0.2 S 00:04 /usr/sbin/httpd -k start 3960548 506832 nobody 18404 0.1 S 00:08 /usr/sbin/httpd -k start 3960484 506832 nobody 18396 0.1 S 00:13 /usr/sbin/httpd -k start 3960590 506832 nobody 18376 0.1 S 00:06 /usr/sbin/httpd -k start 3960531 506832 nobody 18368 0.2 S 00:09 /usr/sbin/httpd -k start 3960543 506832 nobody 18360 0.2 S 00:08 /usr/sbin/httpd -k start 3960545 506832 nobody 18360 0.1 S 00:08 /usr/sbin/httpd -k start 3960532 506832 nobody 18352 0.1 S 00:09 /usr/sbin/httpd -k start 3960546 506832 nobody 18344 0.1 S 00:08 /usr/sbin/httpd -k start 167566 166914 netdata 17204 2.1 Sl 18:31:08 /usr/libexec/netdata/plugins.d/apps.plugin 1 3960524 506832 nobody 16936 0.0 S 00:10 /usr/sbin/httpd -k start 3960541 506832 nobody 16856 0.0 S 00:08 /usr/sbin/httpd -k start 3960542 506832 nobody 16796 0.1 S 00:08 /usr/sbin/httpd -k start 3960530 506832 nobody 16788 0.1 S 00:09 /usr/sbin/httpd -k start 3960523 506832 nobody 16756 0.1 S 00:10 /usr/sbin/httpd -k start 3960277 506832 nobody 16588 0.0 S 00:37 /usr/sbin/httpd -k start 3960533 506832 nobody 16296 0.0 S 00:09 /usr/sbin/httpd -k start 3960397 506832 nobody 16144 0.0 S 00:23 /usr/sbin/httpd -k start 3960602 506832 nobody 15848 0.0 S 00:03 /usr/sbin/httpd -k start 166757 1 root 15748 0.0 Ss 18:31:16 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 725004 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 725001 | madalice_wp | madalice_wp | Query | 0 | closing tables | SELECT a.action_id FROM AMuqf6qZ_actionscheduler_actions a LEFT JOIN AMuqf6qZ_actionscheduler_groups g ON g.group_id=a.group_id WHERE 1=1 AND g.slug='commercekit' AND a.hook='commercegurus_ajs_run_wc_product_index' AND a.status IN ('pending') ORDER BY a.scheduled_date_gmt ASC | | 725000 | madalice_wp | madalice_wp | Query | 0 | Statistics | SELECT AMuqf6qZ_posts.ID FROM AMuqf6qZ_posts WHERE 1=1 AND AMuqf6qZ_posts.post_parent = 53 AND AMuqf6qZ_posts.post_type = 'page' AND ((AMuqf6qZ_posts.post_status <> 'trash' AND AMuqf6qZ_posts.post_status <> 'auto-draft' AND AMuqf6qZ_posts.post_status <> 'wc-checkout-draft' AND AMuqf | +--------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 118 tubesupplies/tubesupplies.com.au-ssl_log 117 madalice/madalice.com.au-ssl_log 51 corpkicks/corporatekicks.com.au-ssl_log 5 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 118 40.115.94.245 109 161.33.202.176 40 35.252.100.101 4 118.127.40.55 2 91.92.243.248 2 144.76.72.24 2 1.146.13.132 2 114.119.159.70 2 114.119.137.101 1 87.250.224.252 1 66.249.73.160 1 43.173.176.102 1 43.172.195.107 1 43.172.194.237 1 34.236.135.14 --- top request paths across all vhosts (last 3 min) --- 44 GET /wp-admin/index.php 43 GET /wp-login.php 24 POST /wp-login.php 6 GET /store/airmax-90-sneakers/ 4 POST /wp-cron.php 3 GET / 2 GET /.zshrc 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 2 GET /store/black-nike-air-forces-drippy-custom-shoes/ 2 GET /ssl/server.key 2 GET /ssl/localhost.key 2 GET /server.key 2 GET /rclone.conf 2 GET /.profile 2 GET /privatekey.key 2 GET /private-key 2 GET /.oci/oci_api_key.pem 2 GET /.oci/config 2 GET /localhost.key 2 GET /key.pem --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/SHSG10010050-12 2 GET /api/getItem/RHSG150100408 2 GET /api/getItem/19R-8000 2 GET /api/getItem/19R-7320 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:20:52:41 +1000] "GET /api/getItem/SHSG404016-SP25-24-DI HTTP/1.1" 200 1436 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:41 +1000] "GET /api/getItem/SHSG404016-SP25-8 HTTP/1.1" 200 1549 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:41 +1000] "GET /api/getItem/SHSG505016-DP19-8 HTTP/1.1" 200 1531 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:42 +1000] "GET /api/getItem/SHSG505016-DP25-8 HTTP/1.1" 200 1548 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:42 +1000] "GET /api/getItem/SHSG505016-DP25-8-DI HTTP/1.1" 200 1397 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:42 +1000] "GET /api/getItem/SHSG505016-SP19-8 HTTP/1.1" 200 1532 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:43 +1000] "GET /api/getItem/SHSG505016-SP25-8 HTTP/1.1" 200 1549 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:43 +1000] "GET /api/getItem/SHSG656520-DP25-8 HTTP/1.1" 200 1414 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:44 +1000] "GET /api/getItem/SHSG656520-DP25-8-DI HTTP/1.1" 200 1398 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:52:44 +1000] "GET /api/getItem/SHSG656520-SP25-8 HTTP/1.1" 200 1402 "-" "RestSharp/106.13.0.0" == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 44 GET /wp-admin/index.php 43 GET /wp-login.php 24 POST /wp-login.php 3 POST /wp-cron.php 2 GET / 1 GET /wp-json/contact-form-7/v1/contact-forms/227/feedback/schema -- last 10 requests -- 161.33.202.176 - - [06/Sep/2026:20:53:14 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 43.173.176.102 - - [06/Sep/2026:20:53:15 +1000] "GET /wp-json/contact-form-7/v1/contact-forms/227/feedback/schema HTTP/1.1" 200 1114 "https://tubesupplies.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 161.33.202.176 - - [06/Sep/2026:20:53:16 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:93.0) Gecko/20100101 Firefox/93.0" 161.33.202.176 - - [06/Sep/2026:20:53:17 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:53:18 +1000] "POST /wp-login.php HTTP/1.1" 200 8128 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2" 43.172.195.107 - - [06/Sep/2026:20:53:18 +1000] "GET / HTTP/1.1" 200 352502 "http://tubesupplies.com.au" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 161.33.202.176 - - [06/Sep/2026:20:53:19 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) 161.33.202.176 - - [06/Sep/2026:20:53:21 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:53:22 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) 118.127.40.55 - - [06/Sep/2026:20:53:24 +1000] "POST /wp-cron.php?doing_wp_cron=1788692003.7592670917510986328125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://tubesupplies.com.au" == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/airmax-90-sneakers/ 2 GET /.zshrc 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 2 GET /store/black-nike-air-forces-drippy-custom-shoes/ 2 GET /ssl/server.key 2 GET /ssl/localhost.key 2 GET /server.key 2 GET /rclone.conf 2 GET /.profile 2 GET /privatekey.key 2 GET /private-key 2 GET /.oci/oci_api_key.pem -- last 10 requests -- 35.252.100.101 - - [06/Sep/2026:20:53:27 +1000] "GET /.oci/oci_api_key.pem HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.100.101 - - [06/Sep/2026:20:53:28 +1000] "GET /.oci/oci_api_key_public.pem HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 35.252.100.101 - - [06/Sep/2026:20:53:28 +1000] "GET /.oci/sessions/DEFAULT/oci_api_key.pem HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/53 35.252.100.101 - - [06/Sep/2026:20:53:28 +1000] "GET /.profile HTTP/1.1" 404 36647 "https://www.madalice.com.au/.profile" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile 35.252.100.101 - - [06/Sep/2026:20:53:28 +1000] "GET /.bash_profile HTTP/1.1" 404 36652 "https://www.madalice.com.au/.bash_profile" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0. 35.252.100.101 - - [06/Sep/2026:20:53:28 +1000] "POST /v1/graphql HTTP/1.1" 404 36656 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safar 35.252.100.101 - - [06/Sep/2026:20:53:28 +1000] "GET /.oci/config HTTP/1.1" 404 36653 "https://www.madalice.com.au/.oci/config" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 35.252.100.101 - - [06/Sep/2026:20:53:29 +1000] "GET /.oci/oci_api_key.pem HTTP/1.1" 404 36661 "https://www.madalice.com.au/.oci/oci_api_key.pem" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) 35.252.100.101 - - [06/Sep/2026:20:53:30 +1000] "GET /@fs/src/.env?raw?? HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 114.119.159.70 - - [06/Sep/2026:20:53:29 +1000] "GET /store/air-max-90-blue-and-black-drippy-copy/?wcpr_verified=1&wcpr_rating=2&rating=1&wcpr_page=2 HTTP/1.1" 200 49774 "https://madalice.com.au/store/air-max-90-blue-and --- last 30 samples (run-up to this incident) --- 2026-09-06 20:51:05 L1=2.20 run=4 blk=1 avail=9991 (72.5%) swpO=0 conn=2 myRSS=1493 php=7 phpRSS=300 ap=14 tcp=26 topuser=madalice 2026-09-06 20:51:12 L1=2.24 run=2 blk=1 avail=9986 (72.5%) swpO=0 conn=1 myRSS=1493 php=6 phpRSS=271 ap=14 tcp=25 topuser=madalice 2026-09-06 20:51:15 L1=2.24 run=2 blk=1 avail=9955 (72.3%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=301 ap=14 tcp=24 topuser=madalice 2026-09-06 20:51:22 L1=2.20 run=3 blk=1 avail=9942 (72.2%) swpO=0 conn=1 myRSS=1493 php=6 phpRSS=305 ap=15 tcp=31 topuser=madalice 2026-09-06 20:51:25 L1=2.20 run=2 blk=1 avail=9910 (71.9%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=302 ap=21 tcp=31 topuser=madalice 2026-09-06 20:51:32 L1=2.17 run=2 blk=1 avail=9952 (72.2%) swpO=0 conn=1 myRSS=1493 php=6 phpRSS=272 ap=19 tcp=26 topuser=madalice 2026-09-06 20:51:35 L1=2.17 run=2 blk=1 avail=9929 (72.1%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=310 ap=17 tcp=25 topuser=madalice 2026-09-06 20:51:42 L1=2.14 run=2 blk=1 avail=9979 (72.4%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=267 ap=15 tcp=25 topuser=madalice 2026-09-06 20:51:45 L1=2.14 run=2 blk=1 avail=9960 (72.3%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=287 ap=15 tcp=26 topuser=madalice 2026-09-06 20:51:52 L1=2.28 run=5 blk=1 avail=9772 (70.9%) swpO=0 conn=2 myRSS=1493 php=8 phpRSS=506 ap=18 tcp=32 topuser=speedlin 2026-09-06 20:51:55 L1=2.28 run=3 blk=1 avail=9915 (72.0%) swpO=0 conn=2 myRSS=1493 php=7 phpRSS=331 ap=18 tcp=31 topuser=madalice 2026-09-06 20:52:02 L1=2.31 run=2 blk=1 avail=9970 (72.4%) swpO=0 conn=2 myRSS=1493 php=5 phpRSS=236 ap=16 tcp=26 topuser=madalice 2026-09-06 20:52:05 L1=2.31 run=4 blk=1 avail=9995 (72.6%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=237 ap=16 tcp=27 topuser=madalice 2026-09-06 20:52:12 L1=2.26 run=2 blk=1 avail=9950 (72.2%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=287 ap=15 tcp=23 topuser=madalice 2026-09-06 20:52:15 L1=2.26 run=2 blk=1 avail=10018(72.7%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=220 ap=15 tcp=22 topuser=madalice 2026-09-06 20:52:22 L1=2.22 run=3 blk=1 avail=9650 (70.0%) swpO=0 conn=2 myRSS=1493 php=8 phpRSS=658 ap=14 tcp=26 topuser=corpkicks 2026-09-06 20:52:25 L1=2.22 run=5 blk=1 avail=10014(72.7%) swpO=0 conn=1 myRSS=1493 php=7 phpRSS=239 ap=17 tcp=31 topuser=madalice 2026-09-06 20:52:32 L1=2.27 run=2 blk=1 avail=9919 (72.0%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=275 ap=17 tcp=27 topuser=madalice 2026-09-06 20:52:35 L1=2.27 run=1 blk=1 avail=9995 (72.5%) swpO=0 conn=1 myRSS=1493 php=5 phpRSS=178 ap=16 tcp=27 topuser=madalice 2026-09-06 20:52:42 L1=2.23 run=2 blk=1 avail=9933 (72.1%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=272 ap=16 tcp=30 topuser=madalice 2026-09-06 20:52:45 L1=2.21 run=4 blk=1 avail=9901 (71.9%) swpO=0 conn=1 myRSS=1493 php=7 phpRSS=339 ap=16 tcp=27 topuser=madalice 2026-09-06 20:52:52 L1=2.27 run=3 blk=1 avail=9767 (70.9%) swpO=0 conn=2 myRSS=1493 php=8 phpRSS=499 ap=16 tcp=31 topuser=customc 2026-09-06 20:52:55 L1=2.33 run=3 blk=1 avail=9725 (70.6%) swpO=0 conn=1 myRSS=1493 php=7 phpRSS=510 ap=16 tcp=32 topuser=corpkicks 2026-09-06 20:53:02 L1=2.30 run=3 blk=1 avail=9739 (70.7%) swpO=0 conn=2 myRSS=1493 php=7 phpRSS=479 ap=17 tcp=33 topuser=corpkicks 2026-09-06 20:53:05 L1=2.36 run=3 blk=1 avail=9841 (71.4%) swpO=0 conn=1 myRSS=1493 php=7 phpRSS=373 ap=17 tcp=31 topuser=tubesupplies 2026-09-06 20:53:12 L1=2.33 run=2 blk=1 avail=9892 (71.8%) swpO=0 conn=2 myRSS=1493 php=6 phpRSS=295 ap=18 tcp=26 topuser=madalice 2026-09-06 20:53:15 L1=2.38 run=3 blk=1 avail=9852 (71.5%) swpO=0 conn=1 myRSS=1493 php=7 phpRSS=366 ap=17 tcp=30 topuser=tubesupplies 2026-09-06 20:53:22 L1=2.83 run=7 blk=1 avail=8930 (64.8%) swpO=0 conn=2 myRSS=1493 php=11 phpRSS=1348 ap=19 tcp=38 topuser=madalice 2026-09-06 20:53:25 L1=3.25 run=9 blk=1 avail=8992 (65.3%) swpO=0 conn=8 myRSS=1493 php=12 phpRSS=1203 ap=33 tcp=51 topuser=madalice 2026-09-06 20:53:32 L1=3.55 run=6 blk=1 avail=8482 (61.6%) swpO=22 conn=6 myRSS=1493 php=14 phpRSS=1716 ap=38 tcp=53 topuser=madalice