INCIDENT 2026-08-15 21:55:55 trigger: mysql_conn=15 ================================================================== load: 35.76 11.24 4.22 4/696 3066405 ncpu:10 mem_avail: 8403MB/11729MB (71.6%) swap_used:2491MB swapout:0/s blocked(D):1 running:2 iowait:6.3% steal:0.0% php: 2 procs / 148MB heaviest user: speedlin (1 procs, 107MB) apache: 75 procs tcp_estab: 30 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1360 nobody 74 567 root 232 316 netdata 8 202 speedlin 1 110 evolution 5 41 kurri 7 29 wp-toolkit 6 14 cpanellogin 1 14 mailnull 3 12 zabbix 1 11 mailman 20 11 dovenull 6 8 dovecot 3 6 nscd 1 3 named 1 2 cpanelconnecttrack 1 2 polkitd 1 1 lowrange 1 1 infinium 1 1 --- php workers by user --- USER PROCS RSS_MB speedlin 1 111 evolution 1 40 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 762 MB Active(file): 521 MB Inactive(file): 171 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 160 MB CommitLimit: 9960 MB Committed_AS: 7910 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 20:44:40 0 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 1393604 2.5 Ssl 14:05:16 /usr/sbin/mariadbd 1220 1 netdata 162264 2.5 Ssl 47-11:45:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3066362 3065943 speedlin 117392 80.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 84900 0.0 Ss 14:05:19 /usr/lib/systemd/systemd-journald 2390234 2382613 root 55020 0.0 S 19:20:18 spamd child 3066364 3065187 evolution 41932 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2856464 2382613 root 31944 0.0 S 06:11:00 spamd child 4922 2431 netdata 28508 0.1 Sl 47-11:45:53 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2223 1201 root 22960 0.0 Sl 47-11:45:57 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3055575 1353308 cpanellogin 15328 0.0 S 19:32 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 185104 2431 netdata 15284 2.0 Sl 3-01:22:16 /usr/libexec/netdata/plugins.d/apps.plugin 1 3066174 1276780 nobody 14920 0.1 S 00:22 /usr/sbin/httpd -k start 3066018 1276780 nobody 14712 0.1 S 00:50 /usr/sbin/httpd -k start 3066016 1276780 nobody 14332 0.0 S 00:50 /usr/sbin/httpd -k start 3066160 1276780 nobody 13992 0.3 S 00:23 /usr/sbin/httpd -k start 1469 1 root 12996 0.1 Ss 47-11:45:57 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3066015 1276780 nobody 12948 0.0 S 00:50 /usr/sbin/httpd -k start 3066363 1471 root 12224 0.0 S 00:00 cPhulkd - processor - http socket 1204 1 zabbix 11836 0.2 Ssl 47-11:45:58 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3066219 3828812 kurri 11780 0.2 S 00:17 dovecot/imap 3066222 3828812 kurri 11556 0.0 S 00:15 dovecot/imap 1353308 1 root 11144 0.0 Ss 24-19:14:28 cpsrvd (SSL) - waiting for connections 1463 1 root 10956 0.0 Ss 47-11:45:57 tailwatchd 3066218 3828812 root 10932 0.3 S 00:17 dovecot/auth -w 3065186 1276780 nobody 10924 0.0 S 01:08 /usr/sbin/httpd -k start 3065780 1276780 nobody 10380 0.0 S 00:58 /usr/sbin/httpd -k start 3063637 1276780 nobody 10204 0.0 S 04:24 /usr/sbin/httpd -k start 3065748 1276780 nobody 9904 0.0 S 00:59 /usr/sbin/httpd -k start 3065182 1276780 nobody 9900 0.0 S 01:09 /usr/sbin/httpd -k start 3066175 1276780 nobody 9512 0.2 S 00:22 /usr/sbin/httpd -k start 3065705 1276780 nobody 9440 0.1 S 01:00 /usr/sbin/httpd -k start 2962454 1471 root 9248 0.0 S 03:02:45 cPhulkd - dbprocessor 3065697 1276780 nobody 9160 0.2 S 01:01 /usr/sbin/httpd -k start 3064411 1276780 nobody 9136 0.0 D 02:36 /usr/sbin/httpd -k start 3064931 1276780 nobody 8936 0.0 S 01:48 /usr/sbin/httpd -k start 3065753 1276780 nobody 8900 0.2 S 00:59 /usr/sbin/httpd -k start 3065993 1276780 nobody 8764 0.0 S 00:52 /usr/sbin/httpd -k start 3065742 1276780 nobody 8672 0.0 S 00:59 /usr/sbin/httpd -k start 3065707 1276780 nobody 8644 0.0 S 01:00 /usr/sbin/httpd -k start 3065775 1276780 nobody 8568 0.0 S 00:58 /usr/sbin/httpd -k start 3065794 1276780 nobody 8536 0.4 S 00:58 /usr/sbin/httpd -k start 3065698 1276780 nobody 8480 0.0 S 01:01 /usr/sbin/httpd -k start 3065773 1276780 nobody 8400 0.0 S 00:58 /usr/sbin/httpd -k start 3064070 1276780 nobody 8372 0.1 S 03:28 /usr/sbin/httpd -k start 3064409 1276780 nobody 8348 0.0 S 02:37 /usr/sbin/httpd -k start 3065196 1276780 nobody 8216 0.0 S 01:07 /usr/sbin/httpd -k start 3066347 281734 mailnull 8120 0.0 S 00:10 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3065747 1276780 nobody 8012 0.2 S 00:59 /usr/sbin/httpd -k start 3065711 1276780 nobody 7924 0.0 S 01:00 /usr/sbin/httpd -k start 3065793 1276780 nobody 7916 0.0 S 00:58 /usr/sbin/httpd -k start 3065745 1276780 nobody 7680 0.1 S 00:59 /usr/sbin/httpd -k start 3065423 1276780 nobody 7668 0.0 S 01:03 /usr/sbin/httpd -k start 3065122 1276780 nobody 7632 0.2 S 01:15 /usr/sbin/httpd -k start 3065749 1276780 nobody 7632 0.4 S 00:59 /usr/sbin/httpd -k start 3065943 1276780 nobody 7548 0.2 S 00:53 /usr/sbin/httpd -k start 3065798 1276780 nobody 7464 0.0 S 00:58 /usr/sbin/httpd -k start 3065771 1276780 nobody 7460 0.0 S 00:58 /usr/sbin/httpd -k start 3065187 1276780 nobody 7448 0.0 S 01:08 /usr/sbin/httpd -k start 3065754 1276780 nobody 7448 0.5 S 00:59 /usr/sbin/httpd -k start 3065205 1276780 nobody 7444 0.0 S 01:06 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 3064411 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 151087 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 102 evolution/apps.evolutionerp.com.au-ssl_log 86 evolution/apps.evolutionerp.com.au 85 evolution/portal.evolutionerp.com.au-ssl_log 25 evolution/my.evolutionerp.com.au-ssl_log 5 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 171 20.104.85.180 25 203.54.180.238 3 66.249.75.97 3 187.111.158.247 2 93.38.26.151 2 87.200.207.52 2 47.82.201.226 2 45.180.181.138 2 45.176.113.37 2 38.95.89.212 2 38.252.110.196 2 37.28.31.158 2 27.34.116.67 2 216.73.216.26 2 200.196.140.85 --- top request paths across all vhosts (last 3 min) --- 32 GET / 28 POST / 25 GET /heartbeat.php 3 GET /robots.txt 2 GET /zxz.php 2 GET /www.php 2 GET /wso.php 2 GET /wp-login.php 2 GET /wp-includes/rest-api/ 2 GET /wp-includes/pomo/ 2 GET /wp-includes/js/tinymce/plugins/compat3x/css/ 2 GET /wp-includes/js/ 2 GET /wp-includes/images/smilies/ 2 GET /wp-includes/images/ 2 GET /wp-includes/ID3/index.php 2 GET /wp-includes/ID3/ 2 GET /wp-includes/html-api/ 2 GET /wp-includes/block-supports/ 2 GET /wp-includes/blocks/shortcode/index.php 2 GET /wp-includes/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 31 GET / 28 POST / 3 GET /robots.txt 2 GET /terms-and-conditions/ 2 GET /product-category/accessories/ 1 GET /wp-content/plugins/woo-custom-product-addons-pro/assets/js/ 1 GET /wp-content/plugins/woo-custom-product-addons-pro/assets/images/ 1 GET /where-to-buy-custom-air-force-1-sneaker/ 1 GET /the-ultimate-guide-to-caring-for-your-custom-air-force-1s/ 1 GET /the-best-custom-air-force-1-shoes-for-streetwear-enthusiasts/ 1 GET /store/toddler-crocs-ice-blue/ 1 GET /store/swarovski-crystal-am90/ -- last 10 requests -- 187.190.174.93 - - [15/Aug/2026:21:55:03 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/store/design-your-own-pet-themed-sneakers/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15 43.119.100.41 - - [15/Aug/2026:21:55:02 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/product-tag/adelaide/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 47.82.201.226 - - [15/Aug/2026:21:55:01 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/custom-vans-shoes-bridal-pearl-edition/" "Mozilla/5.0 (Macintosh; Intel Mac OS 191.7.203.103 - - [15/Aug/2026:21:55:03 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/product-tag/adelaide/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 190.148.209.239 - - [15/Aug/2026:21:55:02 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/store/design-your-own-sneakers/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleW 47.82.201.161 - - [15/Aug/2026:21:55:01 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/delivery-insurance/?srsltid=AfmBOook9JnDsPLPog6vujuhwY2JmRUI6Ke3xvK3RaR0whp7Pxv 43.119.100.69 - - [15/Aug/2026:21:55:01 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/terms-and-conditions/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 212.47.136.56 - - [15/Aug/2026:21:55:31 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/the-best-custom-air-force-1-shoes-for-streetwear-enthusiasts/" "Mozilla/5.0 (Macintos 43.119.100.167 - - [15/Aug/2026:21:55:02 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/design-your-own-sneakers/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Ap 43.119.100.218 - - [15/Aug/2026:21:55:01 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/product-tag/footy/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537 == evolution/apps.evolutionerp.com.au-ssl_log == -- top paths -- 1 GET /zxz.php 1 GET /www.php 1 GET /wso.php 1 GET /wp-login.php 1 GET /wp-includes/rest-api/ 1 GET /wp-includes/pomo/ 1 GET /wp-includes/js/tinymce/plugins/compat3x/css/ 1 GET /wp-includes/js/ 1 GET /wp-includes/images/smilies/ 1 GET /wp-includes/images/ 1 GET /wp-includes/ID3/index.php 1 GET /wp-includes/ID3/ -- last 10 requests -- 20.104.85.180 - - [15/Aug/2026:21:53:58 +1000] "GET /index/function.php HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:58 +1000] "GET /edit.php HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:58 +1000] "GET /wp-includes/rest-api/ HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:59 +1000] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:59 +1000] "GET /wp-good.php HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:00 +1000] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:00 +1000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:00 +1000] "GET /tes.php HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:01 +1000] "GET /files/index.php HTTP/1.1" 404 - "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:01 +1000] "GET /wp-content/uploads/index.php HTTP/1.1" 403 12 "-" "-" == evolution/apps.evolutionerp.com.au == -- top paths -- 1 GET /zxz.php 1 GET /www.php 1 GET /wso.php 1 GET /wp-login.php 1 GET /wp-includes/rest-api/ 1 GET /wp-includes/pomo/ 1 GET /wp-includes/js/tinymce/plugins/compat3x/css/ 1 GET /wp-includes/js/ 1 GET /wp-includes/images/smilies/ 1 GET /wp-includes/images/ 1 GET /wp-includes/ID3/index.php 1 GET /wp-includes/ID3/ -- last 10 requests -- 20.104.85.180 - - [15/Aug/2026:21:53:57 +1000] "GET /sf.php HTTP/1.1" 301 287 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:57 +1000] "GET /index/function.php HTTP/1.1" 301 299 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:58 +1000] "GET /edit.php HTTP/1.1" 301 289 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:58 +1000] "GET /wp-includes/rest-api/ HTTP/1.1" 301 302 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:59 +1000] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 319 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:59 +1000] "GET /wp-good.php HTTP/1.1" 301 292 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:53:59 +1000] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 301 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:00 +1000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 310 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:00 +1000] "GET /tes.php HTTP/1.1" 301 288 "-" "-" 20.104.85.180 - - [15/Aug/2026:21:54:01 +1000] "GET /files/index.php HTTP/1.1" 301 296 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-15 21:53:21 L1=0.49 run=1 blk=0 avail=7481 (63.8%) swpO=0 conn=1 myRSS=2032 php=0 phpRSS=0 ap=25 tcp=35 topuser=- 2026-08-15 21:53:26 L1=0.53 run=3 blk=0 avail=7248 (61.8%) swpO=0 conn=2 myRSS=2032 php=3 phpRSS=321 ap=25 tcp=38 topuser=corpkicks 2026-08-15 21:53:31 L1=0.65 run=1 blk=0 avail=7463 (63.6%) swpO=0 conn=1 myRSS=2032 php=0 phpRSS=0 ap=25 tcp=34 topuser=- 2026-08-15 21:53:36 L1=0.60 run=2 blk=0 avail=7392 (63.0%) swpO=0 conn=2 myRSS=2032 php=1 phpRSS=40 ap=24 tcp=34 topuser=evolution 2026-08-15 21:53:41 L1=0.55 run=2 blk=0 avail=7483 (63.8%) swpO=0 conn=1 myRSS=2032 php=0 phpRSS=0 ap=24 tcp=26 topuser=- 2026-08-15 21:53:46 L1=0.51 run=1 blk=0 avail=7497 (63.9%) swpO=0 conn=2 myRSS=2032 php=1 phpRSS=40 ap=21 tcp=29 topuser=evolution 2026-08-15 21:53:51 L1=0.47 run=3 blk=0 avail=7515 (64.1%) swpO=0 conn=1 myRSS=2032 php=0 phpRSS=0 ap=21 tcp=28 topuser=- 2026-08-15 21:53:56 L1=0.43 run=1 blk=0 avail=7505 (64.0%) swpO=0 conn=2 myRSS=2032 php=1 phpRSS=40 ap=20 tcp=28 topuser=evolution 2026-08-15 21:54:01 L1=0.39 run=2 blk=0 avail=7398 (63.1%) swpO=0 conn=3 myRSS=2032 php=2 phpRSS=174 ap=20 tcp=29 topuser=aaa 2026-08-15 21:54:06 L1=0.36 run=2 blk=0 avail=7498 (63.9%) swpO=0 conn=2 myRSS=2032 php=1 phpRSS=40 ap=20 tcp=31 topuser=evolution 2026-08-15 21:54:11 L1=0.33 run=1 blk=0 avail=7503 (64.0%) swpO=0 conn=3 myRSS=2032 php=0 phpRSS=0 ap=22 tcp=33 topuser=- 2026-08-15 21:54:16 L1=0.31 run=2 blk=0 avail=7357 (62.7%) swpO=0 conn=2 myRSS=2032 php=2 phpRSS=206 ap=22 tcp=30 topuser=corpkicks 2026-08-15 21:54:21 L1=0.44 run=2 blk=0 avail=7412 (63.2%) swpO=0 conn=3 myRSS=2032 php=1 phpRSS=121 ap=22 tcp=31 topuser=corpkicks 2026-08-15 21:54:26 L1=0.41 run=2 blk=0 avail=7499 (63.9%) swpO=0 conn=2 myRSS=2032 php=1 phpRSS=40 ap=21 tcp=24 topuser=evolution 2026-08-15 21:54:31 L1=0.37 run=3 blk=0 avail=7532 (64.2%) swpO=0 conn=3 myRSS=2032 php=0 phpRSS=0 ap=19 tcp=28 topuser=- 2026-08-15 21:54:36 L1=0.34 run=2 blk=0 avail=7516 (64.1%) swpO=0 conn=2 myRSS=2032 php=1 phpRSS=40 ap=19 tcp=29 topuser=evolution 2026-08-15 21:54:41 L1=0.47 run=1 blk=0 avail=7522 (64.1%) swpO=0 conn=3 myRSS=2032 php=0 phpRSS=0 ap=20 tcp=30 topuser=- 2026-08-15 21:54:46 L1=0.44 run=2 blk=0 avail=7443 (63.5%) swpO=0 conn=2 myRSS=2032 php=2 phpRSS=141 ap=20 tcp=28 topuser=speedlin 2026-08-15 21:54:51 L1=1.76 run=17 blk=0 avail=6199 (52.9%) swpO=29 conn=13 myRSS=2032 php=12 phpRSS=1622 ap=35 tcp=63 topuser=madalice 2026-08-15 21:54:56 L1=1.78 run=8 blk=0 avail=6971 (59.4%) swpO=29 conn=2 myRSS=2032 php=6 phpRSS=492 ap=50 tcp=94 topuser=madalice 2026-08-15 21:55:03 L1=3.00 run=43 blk=0 avail=4845 (41.3%) swpO=27 conn=39 myRSS=2032 php=40 phpRSS=3263 ap=96 tcp=109 topuser=madalice 2026-08-15 21:55:06 L1=6.60 run=53 blk=0 avail=3191 (27.2%) swpO=1231 conn=49 myRSS=2029 php=51 phpRSS=5344 ap=102 tcp=85 topuser=madalice 2026-08-15 21:55:14 L1=10.64 run=67 blk=42 avail=418 (3.6%) swpO=23232 conn=56 myRSS=1830 php=55 phpRSS=8575 ap=99 tcp=55 topuser=madalice 2026-08-15 21:55:17 L1=15.71 run=57 blk=31 avail=250 (2.1%) swpO=41067 conn=56 myRSS=1707 php=55 phpRSS=8316 ap=100 tcp=54 topuser=madalice 2026-08-15 21:55:27 L1=28.64 run=82 blk=7 avail=171 (1.5%) swpO=43132 conn=47 myRSS=1382 php=60 phpRSS=6610 ap=105 tcp=36 topuser=madalice 2026-08-15 21:55:27 L1=28.64 run=75 blk=10 avail=174 (1.5%) swpO=35722 conn=47 myRSS=1381 php=60 phpRSS=6456 ap=107 tcp=36 topuser=madalice 2026-08-15 21:55:45 L1=42.08 run=20 blk=2 avail=5986 (51.0%) swpO=4018 conn=15 myRSS=1349 php=18 phpRSS=2722 ap=87 tcp=34 topuser=madalice 2026-08-15 21:55:45 L1=42.08 run=22 blk=2 avail=6006 (51.2%) swpO=4278 conn=14 myRSS=1349 php=18 phpRSS=2656 ap=87 tcp=34 topuser=madalice 2026-08-15 21:55:55 L1=35.76 run=2 blk=1 avail=8403 (71.6%) swpO=0 conn=15 myRSS=1360 php=2 phpRSS=148 ap=75 tcp=30 topuser=speedlin 2026-08-15 21:55:55 L1=35.76 run=6 blk=1 avail=8401 (71.6%) swpO=0 conn=14 myRSS=1360 php=2 phpRSS=151 ap=75 tcp=30 topuser=speedlin