INCIDENT 2026-09-06 22:37:45 trigger: php_rss=1584MB ================================================================== load: 1.96 1.79 1.99 8/712 130462 ncpu:10 mem_avail: 8553MB/13777MB (62.1%) swap_used:2467MB swapout:123/s blocked(D):1 running:8 iowait:7.6% steal:0.0% php: 14 procs / 1584MB heaviest user: madalice (10 procs, 1560MB) apache: 42 procs tcp_estab: 52 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 10 1565 mysql 1 1494 root 250 928 nobody 41 664 netdata 8 238 infinium 5 173 mailman 20 111 kurri 5 67 wp-toolkit 3 55 dovenull 6 55 cpanellogin 1 47 mailnull 4 39 dovecot 3 23 aaa 1 15 lowrange 1 14 alison 1 14 named 1 11 zabbix 1 10 evolution 11 10 polkitd 1 9 --- php workers by user --- USER PROCS RSS_MB madalice 10 1570 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7450 MB Active(file): 2936 MB Inactive(file): 4639 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 565 MB CommitLimit: 10984 MB Committed_AS: 9641 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 5-20:15:19 5204 /usr/bin/imunify-agent-proxy 4109079 root 1-17:52:57 1824 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-17:52:57 90132 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1530644 3.0 Ssl 1-03:01:14 /usr/sbin/mariadbd 166870 1 netdata 180656 2.6 Ssl 20:15:25 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 130310 167896 madalice 169072 52.5 R 00:10 php-fpm: pool madalice_com_au 130307 167896 madalice 167308 53.3 R 00:10 php-fpm: pool madalice_com_au 130315 167896 madalice 167276 44.6 R 00:10 php-fpm: pool madalice_com_au 130313 167896 madalice 165228 45.9 R 00:10 php-fpm: pool madalice_com_au 130308 167896 madalice 163004 48.1 S 00:10 php-fpm: pool madalice_com_au 130306 167896 madalice 159776 52.0 R 00:10 php-fpm: pool madalice_com_au 220207 168913 root 159664 0.0 S 19:59:27 spamd child 130314 167896 madalice 159616 48.1 S 00:10 php-fpm: pool madalice_com_au 130346 167896 madalice 159500 41.0 R 00:10 php-fpm: pool madalice_com_au 130309 167896 madalice 159124 48.8 S 00:10 php-fpm: pool madalice_com_au 130401 167896 madalice 158548 37.5 R 00:06 php-fpm: pool madalice_com_au 167871 1 root 141744 0.0 Ss 20:15:18 /usr/lib/systemd/systemd-journald 168913 1 root 94912 0.0 Ss 20:14:15 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4109105 4109079 root 90132 1.4 Sl 1-17:52:57 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 130311 1353308 infinium 56032 1.5 S 00:10 webmaild - serving 1.41.252.211 130351 1353308 infinium 55888 1.5 S 00:09 webmaild - serving 1.41.252.211 43953 1353308 cpanellogin 48780 0.0 S 23:09 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 2902970 168913 root 43196 0.0 S 06:56:10 spamd child 1353308 1 root 42304 0.1 Ss 46-19:56:31 cpsrvd (SSL) - waiting for connections 1469 1 root 37408 0.1 Ss 69-12:28:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 36828 0.1 Sl 20:15:20 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 35096 0.0 Sl 9-20:18:05 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 130361 1353308 root 34780 0.0 S 00:08 webmaild - serving 1.41.252.211 166645 1 wp-toolkit 31304 0.0 Ss 20:15:29 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 130320 1542095 infinium 29708 1.8 S 00:10 php-fpm: pool user_infinium 1463 1 root 23976 0.0 Ss 69-12:28:00 tailwatchd 167896 1 root 23932 0.0 Ss 20:15:17 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 113250 506832 nobody 21604 0.0 S 05:05 /usr/sbin/httpd -k start 114125 506832 nobody 21272 0.0 S 03:31 /usr/sbin/httpd -k start 130386 1542095 infinium 20916 0.7 S 00:08 php-fpm: pool user_infinium 112281 506832 nobody 20796 0.0 S 06:23 /usr/sbin/httpd -k start 119725 506832 nobody 20452 0.1 S 02:40 /usr/sbin/httpd -k start 113234 506832 nobody 20400 0.1 S 05:05 /usr/sbin/httpd -k start 114091 506832 nobody 20100 0.0 S 03:32 /usr/sbin/httpd -k start 129539 506832 nobody 19968 0.0 S 01:21 /usr/sbin/httpd -k start 113199 506832 nobody 19552 0.0 S 05:07 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19528 0.0 Ss 20:15:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 129574 506832 nobody 19408 0.0 S 01:20 /usr/sbin/httpd -k start 119726 506832 nobody 18804 0.0 S 02:40 /usr/sbin/httpd -k start 130396 506832 nobody 18484 0.2 S 00:07 /usr/sbin/httpd -k start 130397 506832 nobody 18484 0.2 S 00:07 /usr/sbin/httpd -k start 130416 506832 nobody 18460 0.1 S 00:06 /usr/sbin/httpd -k start 130391 506832 nobody 18400 0.2 S 00:08 /usr/sbin/httpd -k start 130393 506832 nobody 18400 0.1 S 00:07 /usr/sbin/httpd -k start 130395 506832 nobody 18396 0.1 S 00:07 /usr/sbin/httpd -k start 130400 506832 nobody 18396 0.1 S 00:07 /usr/sbin/httpd -k start 130418 506832 nobody 18396 0.1 S 00:06 /usr/sbin/httpd -k start 130407 506832 nobody 18392 0.1 S 00:06 /usr/sbin/httpd -k start 130390 506832 nobody 18368 0.1 S 00:08 /usr/sbin/httpd -k start 130388 506832 nobody 18360 0.1 S 00:08 /usr/sbin/httpd -k start 130389 506832 nobody 18332 0.2 S 00:08 /usr/sbin/httpd -k start 130394 506832 nobody 18264 0.1 S 00:07 /usr/sbin/httpd -k start 130399 506832 nobody 18232 0.2 S 00:07 /usr/sbin/httpd -k start 130201 506832 nobody 17312 0.0 S 00:28 /usr/sbin/httpd -k start 167566 166914 netdata 17288 2.1 Sl 20:15:20 /usr/libexec/netdata/plugins.d/apps.plugin 1 43332 1471 root 16620 0.0 S 24:06 cPhulkd - dbprocessor 3942600 167382 aaa 15980 0.0 S 01:50:58 dovecot/imap 130404 506832 nobody 15892 0.0 S 00:06 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 769012 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min olytis/tis.com.au-ssl_log 164 evolution/app.evolutionerp.com.au-ssl_log 106 whiz/whizengineering.com.au-ssl_log 48 madalice/madalice.com.au-ssl_log 17 alison/alisonarts.com.au-ssl_log 7 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 164 45.148.10.9 106 40.115.94.245 48 34.101.84.209 7 34.138.38.139 3 195.178.110.155 3 114.119.130.40 2 114.119.143.226 2 114.119.143.104 1 66.249.73.172 1 58.87.87.198 1 2a03:2880:f802:e:: 1 144.76.72.24 1 114.119.150.154 1 114.119.143.14 1 114.119.140.234 --- top request paths across all vhosts (last 3 min) --- 45 POST / 45 GET /api/getItem/LWPG2001KG 14 POST /index.php 12 GET / 9 POST /wp-json/batch/v1 8 POST /api/auth/signin 8 GET /api/getItem/LWFB2001KG 7 POST /wp-json/Batch/v1 7 POST /wp-json/batch/v1/ 7 POST //wp-json/batch/v1 7 POST /wordpress/wp-json/batch/v1 7 POST /signin 7 POST /login 7 POST /blog/wp-json/batch/v1 6 POST /signup 4 POST /register 4 GET /store/pearl-and-rhinestone-wedding-converse/ 3 POST /dashboard 3 GET /wp-json/gravitysmtp/v1/tests/mock-data 2 POST /blog/index.php --- busiest 3 vhosts: top paths + last 10 requests --- == olytis/tis.com.au-ssl_log == -- top paths -- 45 POST / 14 POST /index.php 12 GET / 9 POST /wp-json/batch/v1 8 POST /api/auth/signin 7 POST /wp-json/Batch/v1 7 POST /wp-json/batch/v1/ 7 POST //wp-json/batch/v1 7 POST /wordpress/wp-json/batch/v1 7 POST /signin 7 POST /login 7 POST /blog/wp-json/batch/v1 -- last 10 requests -- 45.148.10.9 - - [06/Sep/2026:22:37:25 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:25 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:28 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:28 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:29 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:31 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:32 +1000] "POST /api/auth/signin HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:33 +1000] "POST /dashboard HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:33 +1000] "POST /dashboard HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 45.148.10.9 - - [06/Sep/2026:22:37:35 +1000] "POST /dashboard HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 45 GET /api/getItem/LWPG2001KG 8 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/SHSG404016-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG757550-8 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757530-8 1 GET /api/getItem/SHSG757525-8 1 GET /api/getItem/SHSG757520-9 1 GET /api/getItem/SHSG757520-8 1 GET /api/getItem/SHSG656540-8 -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:22:36:52 +1000] "GET /api/getItem/SHSG757530-8 HTTP/1.1" 200 2120 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:52 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:53 +1000] "GET /api/getItem/SHSG757540-8 HTTP/1.1" 200 1557 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:53 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:53 +1000] "GET /api/getItem/SHSG757550-8 HTTP/1.1" 200 1944 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:53 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:53 +1000] "GET /api/getItem/SHSG898920-8 HTTP/1.1" 200 1866 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:53 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:54 +1000] "GET /api/getItem/SHSG898930-8 HTTP/1.1" 200 1339 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:22:36:54 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" == whiz/whizengineering.com.au-ssl_log == -- top paths -- 1 GET /transactional/.env 1 GET /tmp/phpinfo.php 1 GET /test/phpinfo.php 1 GET /test.php 1 GET /sparkpost/.env 1 GET /smtp/.env 1 GET /sitemaps/.env 1 GET /ses/.env 1 GET /sendgrid/.env 1 GET /sender/.env 1 GET /public/phpinfo.php 1 GET /psnlink/.env -- last 10 requests -- 34.101.84.209 - - [06/Sep/2026:22:35:09 +1000] "GET /test/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:09 +1000] "GET /dev/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:10 +1000] "GET /old/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:10 +1000] "GET /tmp/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:10 +1000] "GET /public/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:10 +1000] "GET /info HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:11 +1000] "GET /php-info.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:11 +1000] "GET /phpversion.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:11 +1000] "GET /_phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.101.84.209 - - [06/Sep/2026:22:35:11 +1000] "GET /old_phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-06 22:35:16 L1=1.88 run=1 blk=1 avail=9871 (71.6%) swpO=0 conn=2 myRSS=1497 php=6 phpRSS=335 ap=16 tcp=28 topuser=madalice 2026-09-06 22:35:24 L1=1.74 run=2 blk=1 avail=9770 (70.9%) swpO=0 conn=3 myRSS=1497 php=7 phpRSS=476 ap=14 tcp=32 topuser=madalice 2026-09-06 22:35:26 L1=1.74 run=2 blk=1 avail=9785 (71.0%) swpO=0 conn=2 myRSS=1497 php=7 phpRSS=461 ap=14 tcp=30 topuser=madalice 2026-09-06 22:35:34 L1=1.70 run=1 blk=1 avail=9891 (71.8%) swpO=0 conn=3 myRSS=1497 php=6 phpRSS=334 ap=13 tcp=29 topuser=madalice 2026-09-06 22:35:36 L1=1.70 run=2 blk=1 avail=9879 (71.7%) swpO=0 conn=2 myRSS=1497 php=6 phpRSS=334 ap=13 tcp=28 topuser=madalice 2026-09-06 22:35:44 L1=1.67 run=1 blk=1 avail=10030(72.8%) swpO=0 conn=3 myRSS=1497 php=5 phpRSS=178 ap=13 tcp=29 topuser=madalice 2026-09-06 22:35:46 L1=1.67 run=1 blk=1 avail=10033(72.8%) swpO=0 conn=2 myRSS=1497 php=5 phpRSS=178 ap=13 tcp=28 topuser=madalice 2026-09-06 22:35:54 L1=1.56 run=1 blk=1 avail=10030(72.8%) swpO=0 conn=3 myRSS=1497 php=5 phpRSS=178 ap=13 tcp=28 topuser=madalice 2026-09-06 22:35:56 L1=1.56 run=1 blk=1 avail=10027(72.8%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=178 ap=13 tcp=30 topuser=madalice 2026-09-06 22:36:04 L1=1.48 run=1 blk=1 avail=10164(73.8%) swpO=0 conn=3 myRSS=1497 php=4 phpRSS=23 ap=13 tcp=26 topuser=root 2026-09-06 22:36:06 L1=1.48 run=1 blk=1 avail=10052(73.0%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=155 ap=13 tcp=26 topuser=madalice 2026-09-06 22:36:14 L1=1.40 run=1 blk=1 avail=10052(73.0%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=155 ap=13 tcp=25 topuser=madalice 2026-09-06 22:36:16 L1=1.40 run=1 blk=1 avail=10053(73.0%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=155 ap=13 tcp=25 topuser=madalice 2026-09-06 22:36:24 L1=1.34 run=1 blk=1 avail=10043(72.9%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=155 ap=14 tcp=33 topuser=madalice 2026-09-06 22:36:26 L1=1.34 run=3 blk=1 avail=9915 (72.0%) swpO=0 conn=1 myRSS=1497 php=7 phpRSS=330 ap=16 tcp=34 topuser=tubesupplies 2026-09-06 22:36:35 L1=1.66 run=1 blk=1 avail=10146(73.6%) swpO=0 conn=1 myRSS=1497 php=4 phpRSS=23 ap=16 tcp=28 topuser=root 2026-09-06 22:36:36 L1=1.61 run=1 blk=1 avail=10155(73.7%) swpO=0 conn=1 myRSS=1497 php=4 phpRSS=23 ap=14 tcp=28 topuser=root 2026-09-06 22:36:45 L1=1.56 run=2 blk=2 avail=10037(72.9%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=158 ap=14 tcp=29 topuser=madalice 2026-09-06 22:36:46 L1=1.52 run=1 blk=1 avail=10036(72.8%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=158 ap=14 tcp=32 topuser=madalice 2026-09-06 22:36:55 L1=1.47 run=2 blk=1 avail=10046(72.9%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=158 ap=14 tcp=29 topuser=madalice 2026-09-06 22:36:56 L1=1.52 run=1 blk=1 avail=10023(72.8%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=181 ap=14 tcp=29 topuser=madalice 2026-09-06 22:37:05 L1=1.47 run=2 blk=1 avail=9773 (70.9%) swpO=0 conn=1 myRSS=1497 php=7 phpRSS=504 ap=14 tcp=30 topuser=corpkicks 2026-09-06 22:37:06 L1=1.44 run=1 blk=1 avail=10020(72.7%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=181 ap=14 tcp=28 topuser=madalice 2026-09-06 22:37:15 L1=1.48 run=1 blk=1 avail=10021(72.7%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=182 ap=14 tcp=29 topuser=madalice 2026-09-06 22:37:17 L1=1.44 run=1 blk=1 avail=10008(72.6%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=182 ap=15 tcp=35 topuser=madalice 2026-09-06 22:37:25 L1=1.41 run=2 blk=1 avail=10003(72.6%) swpO=0 conn=1 myRSS=1497 php=5 phpRSS=182 ap=15 tcp=31 topuser=madalice 2026-09-06 22:37:27 L1=1.37 run=2 blk=1 avail=9947 (72.2%) swpO=0 conn=1 myRSS=1497 php=6 phpRSS=270 ap=15 tcp=32 topuser=madalice 2026-09-06 22:37:35 L1=1.43 run=10 blk=1 avail=9818 (71.3%) swpO=0 conn=1 myRSS=1497 php=12 phpRSS=464 ap=15 tcp=46 topuser=madalice 2026-09-06 22:37:37 L1=1.87 run=10 blk=1 avail=8989 (65.2%) swpO=97 conn=1 myRSS=1494 php=13 phpRSS=1304 ap=18 tcp=56 topuser=madalice 2026-09-06 22:37:45 L1=1.96 run=8 blk=1 avail=8553 (62.1%) swpO=123 conn=7 myRSS=1494 php=14 phpRSS=1584 ap=42 tcp=52 topuser=madalice