INCIDENT 2026-08-18 21:53:02 trigger: php_rss=1781MB ================================================================== load: 2.72 2.08 1.92 21/662 1927637 ncpu:10 mem_avail: 5427MB/11729MB (46.3%) swap_used:2476MB swapout:5/s blocked(D):0 running:13 iowait:0.1% steal:0.0% php: 10 procs / 1781MB heaviest user: madalice (9 procs, 1661MB) apache: 27 procs tcp_estab: 40 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2457 madalice 9 1799 root 241 646 nobody 26 413 netdata 8 262 olympic 1 135 kurri 6 69 cpanellogin 1 62 dovenull 6 26 wp-toolkit 6 18 zabbix 1 15 mailman 20 12 lowrange 1 12 infinium 1 12 evolution 4 12 alison 1 12 aaa 1 12 nscd 1 8 mailnull 1 7 dovecot 3 7 --- php workers by user --- USER PROCS RSS_MB madalice 9 1834 olympic 1 139 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5797 MB Active(file): 4047 MB Inactive(file): 803 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 419 MB CommitLimit: 9960 MB Committed_AS: 8612 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 20:41:46 1568 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2515800 10.5 Ssl 3-14:02:25 /usr/sbin/mariadbd 1927530 1926245 madalice 266380 53.5 S 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1927543 1924244 madalice 252148 107 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1927546 1927535 madalice 246868 103 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1927541 1924238 madalice 238096 113 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 209920 2.5 Ssl 50-11:43:07 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1927551 1927548 madalice 205036 93.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1927550 1927547 madalice 204536 95.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1000361 998750 root 174356 0.0 S 19:28:13 spamd child 1927581 1924128 madalice 126728 99.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1578009 998750 root 95948 0.0 S 08:10:34 spamd child 998750 1 root 89612 0.0 Ss 19:30:18 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1917418 1353308 cpanellogin 63780 0.0 S 15:57 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1353308 1 root 42100 0.0 Ss 27-19:11:37 cpsrvd (SSL) - waiting for connections 2223 1201 root 41208 0.0 Sl 50-11:43:06 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 35464 0.1 Sl 50-11:43:02 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2575382 1 root 31820 0.0 Ss 3-14:02:28 /usr/lib/systemd/systemd-journald 1927542 1922427 madalice 25068 109 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1916991 1276780 nobody 22848 0.0 S 16:28 /usr/sbin/httpd -k start 1924244 1276780 nobody 21376 0.0 S 04:46 /usr/sbin/httpd -k start 1924128 1276780 nobody 21072 0.1 S 04:49 /usr/sbin/httpd -k start 1924238 1276780 nobody 21056 0.0 S 04:46 /usr/sbin/httpd -k start 1922427 1276780 nobody 20792 0.0 S 07:22 /usr/sbin/httpd -k start 1924241 1276780 nobody 20704 0.1 S 04:46 /usr/sbin/httpd -k start 998083 1 root 20608 0.0 Ss 19:30:51 lfd - sleeping 1926278 1276780 nobody 20536 0.1 S 01:56 /usr/sbin/httpd -k start 1926245 1276780 nobody 20288 0.0 S 02:00 /usr/sbin/httpd -k start 1924269 1276780 nobody 20108 0.0 S 04:46 /usr/sbin/httpd -k start 1469 1 root 19028 0.1 Ss 50-11:43:06 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1924142 1276780 nobody 19020 0.0 S 04:48 /usr/sbin/httpd -k start 1927062 1276780 nobody 18636 0.0 S 00:49 /usr/sbin/httpd -k start 1924123 1276780 nobody 17856 0.0 S 04:50 /usr/sbin/httpd -k start 1925383 1276780 nobody 17700 0.0 S 03:03 /usr/sbin/httpd -k start 1924130 1276780 nobody 17520 0.0 S 04:49 /usr/sbin/httpd -k start 1924252 1276780 nobody 17240 0.0 S 04:46 /usr/sbin/httpd -k start 1463 1 root 17020 0.0 Ss 50-11:43:06 tailwatchd 1924266 1276780 nobody 16876 0.0 S 04:46 /usr/sbin/httpd -k start 185104 2431 netdata 16820 2.0 Sl 6-01:19:25 /usr/libexec/netdata/plugins.d/apps.plugin 1 1926269 1276780 nobody 16552 0.1 S 01:57 /usr/sbin/httpd -k start 1204 1 zabbix 16132 0.2 Ssl 50-11:43:07 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1927582 1276780 nobody 14732 0.0 S 00:01 /usr/sbin/httpd -k start 1927547 1276780 nobody 14724 0.0 S 00:02 /usr/sbin/httpd -k start 1927535 1276780 nobody 14660 0.0 S 00:03 /usr/sbin/httpd -k start 1927548 1276780 nobody 14660 0.0 S 00:02 /usr/sbin/httpd -k start 1109893 1471 root 13648 0.0 S 16:27:46 cPhulkd - dbprocessor 1919264 3828812 lowrange 12604 0.0 S 13:07 dovecot/imap 1918919 3828812 aaa 12468 0.0 S 13:25 dovecot/imap 1913119 3828812 alison 12344 0.0 S 22:20 dovecot/imap 1927446 3828812 infinium 12316 0.0 S 00:11 dovecot/imap 1912765 3828812 kurri 12040 0.0 S 22:54 dovecot/imap 1926480 3828812 kurri 11896 0.0 S 01:34 dovecot/imap 1906236 3828812 kurri 11868 0.0 S 32:53 dovecot/imap 1916397 3828812 kurri 11804 0.0 S 17:27 dovecot/imap 1926484 3828812 kurri 11716 0.0 S 01:34 dovecot/imap 1916409 3828812 kurri 11528 0.0 S 17:27 dovecot/imap 1926481 3828812 root 10956 0.0 S 01:34 dovecot/auth -w 1927583 1276780 nobody 10596 0.0 S 00:01 /usr/sbin/httpd -k start 1927584 1276780 nobody 10596 0.0 S 00:01 /usr/sbin/httpd -k start 1927585 1276780 nobody 10596 0.0 S 00:01 /usr/sbin/httpd -k start 1927677 1276780 nobody 10596 0.0 S 00:00 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10030240 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 107 coscom/coscom.com.au-ssl_log 85 olympic/olympicfencing.com.au-ssl_log 46 lowrange/lowrange.com.au-ssl_log 33 olympic/olympicfencing.com.au 31 evolution/portal.evolutionerp.com.au-ssl_log 21 vinesit/vinesit.com.au-ssl_log 11 vinesit/vinesit.com.au 7 evolution/my.evolutionerp.com.au-ssl_log 2 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 91 20.169.136.165 89 146.70.194.236 71 20.100.177.66 33 4.232.94.69 21 203.54.180.238 18 20.151.109.219 3 173.212.225.238 2 66.249.65.168 2 118.127.40.55 2 114.119.159.70 2 114.119.137.101 1 74.7.244.15 1 66.249.65.170 1 52.167.144.140 1 40.77.167.75 --- top request paths across all vhosts (last 3 min) --- 21 GET /heartbeat.php 4 GET /wp-content/index.php 3 GET /w.php 3 GET /wp-content/uploads/ 3 GET /security.txt 3 GET /red.php 3 GET /raf.php 3 GET /infos.php 3 GET /images.php 3 GET /h02ugyh.php 3 GET /get.php 3 GET /geck.php 3 GET /FWAZ.php 3 GET /fpwch.php 3 GET /file52.php 3 GET /dejavu.php 3 GET /coffexium.php 3 GET /ccc.php 3 GET /blurbs.php 3 GET /biufile.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 1 POST / 1 GET /wp.php 1 GET /wp-includes/style-engine/autoload_classmap.php 1 GET /wp-includes/SimplePie/admin.php 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/wp-content/plugins/woocommerce/src/Internal/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi//wp-content/plugins/woocommerce/src/Internal/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/wp-content/plugins/woocommerce/src/Internal/RestApi/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes//wp-content/plugins/woocommerce/src/Internal/RestApi/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4//wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/ 1 GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds//wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/ -- last 10 requests -- 146.70.194.236 - - [18/Aug/2026:21:52:51 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/ HTTP/1.1" 200 395 "-" "-" 146.70.194.236 - - [18/Aug/2026:21:52:52 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds//wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/ HTTP/1.1" 301 1 "-" "-" 146.70.194.236 - - [18/Aug/2026:21:52:54 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/ HTTP/1.1" 404 30587 "-" "-" 146.70.194.236 - - [18/Aug/2026:21:52:57 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/CollectionQuery.php HTTP/1.1" 200 1 "-" "-" 146.70.194.236 - - [18/Aug/2026:21:52:58 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/Controller.php HTTP/1.1" 200 1 "-" "-" 114.119.159.70 - - [18/Aug/2026:21:52:56 +1000] "GET /store/hand-painted-nike-af1-dodskull/?rating=3&wcpr_rating=2&wcpr_image=1&wcpr_verified=1 HTTP/1.1" 404 30589 "https://madalice.com.au/store/hand-painted-nike-af1-dod 146.70.194.236 - - [18/Aug/2026:21:52:58 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/DataUtils.php HTTP/1.1" 200 1 "-" "-" 146.70.194.236 - - [18/Aug/2026:21:52:59 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/Schema/ HTTP/1.1" 200 365 "-" "-" 202.153.211.134 - - [18/Aug/2026:21:52:56 +1000] "GET /wp-admin/edit.php?post_type=shop_order HTTP/1.1" 200 122889 "https://madalice.com.au/wp-admin/post.php?post=34665&action=edit" "Mozilla/5.0 (Windows NT 10.0; Win64; 146.70.194.236 - - [18/Aug/2026:21:52:59 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/Schema//wp-content/plugins/woocommerce/src/Internal/RestApi/Routes/V4/Refunds/ HTTP/1.1" 301 1 " == coscom/coscom.com.au-ssl_log == -- top paths -- 1 GET /zxz.php 1 GET /xmlrpc.php 1 GET /www.php 1 GET /wp-login.php 1 GET /wp-includes/rest-api/ 1 GET /wp-includes/pomo/ 1 GET /wp-includes/js/tinymce/plugins/compat3x/css/ 1 GET /wp-includes/js/ 1 GET /wp-includes/images/smilies/ 1 GET /wp-includes/images/ 1 GET /wp-includes/ID3/index.php 1 GET /wp-includes/ID3/ -- last 10 requests -- 20.169.136.165 - - [18/Aug/2026:21:52:36 +1000] "GET /wp-good.php HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:36 +1000] "GET /wp-admin/js/widgets/ HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:37 +1000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:37 +1000] "GET /tes.php HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:37 +1000] "GET /files/index.php HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:38 +1000] "GET /images/images/about.php HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:39 +1000] "GET /ms-edit.php HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:39 +1000] "GET /rip.php HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:40 +1000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 20.169.136.165 - - [18/Aug/2026:21:52:40 +1000] "GET /xmlrpc.php HTTP/1.1" 401 36 "-" "-" == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 2 POST /wp-cron.php 2 GET /w.php 2 GET /security.txt 2 GET /red.php 2 GET /images.php 2 GET /h02ugyh.php 2 GET /get.php 2 GET /geck.php 2 GET /FWAZ.php 2 GET /fpwch.php 2 GET /file52.php 2 GET /dejavu.php -- last 10 requests -- 20.100.177.66 - - [18/Aug/2026:21:52:01 +1000] "GET /biufile.php HTTP/1.1" 301 - "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:02 +1000] "GET /biufile.php HTTP/1.1" 404 56918 "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:04 +1000] "GET /dejavu.php HTTP/1.1" 301 - "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:06 +1000] "GET /dejavu.php HTTP/1.1" 404 56918 "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:08 +1000] "GET /aaf.php HTTP/1.1" 301 - "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:10 +1000] "GET /aaf.php HTTP/1.1" 404 56918 "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:12 +1000] "GET /h02ugyh.php HTTP/1.1" 301 - "-" "-" 20.100.177.66 - - [18/Aug/2026:21:52:13 +1000] "GET /h02ugyh.php HTTP/1.1" 404 56918 "-" "-" 216.73.216.153 - - [18/Aug/2026:21:52:13 +1000] "GET /robots.txt HTTP/1.1" 200 147 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 118.127.40.55 - - [18/Aug/2026:21:52:15 +1000] "POST /wp-cron.php?doing_wp_cron=1787053934.9864780902862548828125 HTTP/1.1" 200 1 "-" "WordPress/6.9.7; https://www.olympicfencing.com.au" --- last 30 samples (run-up to this incident) --- 2026-08-18 21:50:42 L1=2.10 run=6 blk=0 avail=6574 (56.0%) swpO=0 conn=2 myRSS=2457 php=4 phpRSS=446 ap=24 tcp=30 topuser=olympic 2026-08-18 21:50:42 L1=2.10 run=9 blk=0 avail=6567 (56.0%) swpO=0 conn=2 myRSS=2457 php=4 phpRSS=455 ap=24 tcp=30 topuser=olympic 2026-08-18 21:50:52 L1=2.31 run=4 blk=0 avail=6545 (55.8%) swpO=0 conn=2 myRSS=2457 php=3 phpRSS=430 ap=24 tcp=28 topuser=madalice 2026-08-18 21:50:52 L1=2.31 run=6 blk=0 avail=6543 (55.8%) swpO=0 conn=2 myRSS=2457 php=3 phpRSS=436 ap=24 tcp=29 topuser=madalice 2026-08-18 21:51:02 L1=2.35 run=3 blk=0 avail=6779 (57.8%) swpO=0 conn=2 myRSS=2457 php=2 phpRSS=172 ap=24 tcp=29 topuser=madalice 2026-08-18 21:51:02 L1=2.35 run=5 blk=0 avail=6774 (57.8%) swpO=0 conn=2 myRSS=2457 php=2 phpRSS=176 ap=24 tcp=29 topuser=madalice 2026-08-18 21:51:12 L1=2.69 run=5 blk=0 avail=6657 (56.8%) swpO=0 conn=2 myRSS=2457 php=4 phpRSS=332 ap=28 tcp=29 topuser=madalice 2026-08-18 21:51:12 L1=2.69 run=8 blk=0 avail=6639 (56.6%) swpO=0 conn=2 myRSS=2457 php=4 phpRSS=351 ap=28 tcp=29 topuser=madalice 2026-08-18 21:51:22 L1=2.74 run=4 blk=0 avail=6691 (57.1%) swpO=0 conn=2 myRSS=2457 php=3 phpRSS=314 ap=23 tcp=26 topuser=otterfencing 2026-08-18 21:51:22 L1=2.74 run=8 blk=0 avail=6684 (57.0%) swpO=0 conn=2 myRSS=2457 php=3 phpRSS=311 ap=23 tcp=26 topuser=otterfencing 2026-08-18 21:51:32 L1=2.86 run=5 blk=0 avail=6822 (58.2%) swpO=0 conn=2 myRSS=2457 php=3 phpRSS=190 ap=22 tcp=31 topuser=olympic 2026-08-18 21:51:32 L1=2.86 run=5 blk=0 avail=6810 (58.1%) swpO=0 conn=3 myRSS=2457 php=3 phpRSS=199 ap=22 tcp=31 topuser=olympic 2026-08-18 21:51:42 L1=2.96 run=4 blk=0 avail=6727 (57.4%) swpO=0 conn=2 myRSS=2457 php=2 phpRSS=253 ap=22 tcp=26 topuser=otterfencing 2026-08-18 21:51:42 L1=2.96 run=4 blk=0 avail=6719 (57.3%) swpO=0 conn=3 myRSS=2457 php=2 phpRSS=261 ap=22 tcp=26 topuser=otterfencing 2026-08-18 21:51:52 L1=2.83 run=3 blk=0 avail=6842 (58.3%) swpO=0 conn=2 myRSS=2457 php=1 phpRSS=100 ap=22 tcp=26 topuser=otterfencing 2026-08-18 21:51:52 L1=2.83 run=5 blk=0 avail=6837 (58.3%) swpO=0 conn=3 myRSS=2457 php=1 phpRSS=105 ap=22 tcp=26 topuser=otterfencing 2026-08-18 21:52:02 L1=3.16 run=5 blk=0 avail=6736 (57.4%) swpO=0 conn=2 myRSS=2457 php=2 phpRSS=233 ap=21 tcp=30 topuser=otterfencing 2026-08-18 21:52:02 L1=3.16 run=6 blk=0 avail=6728 (57.4%) swpO=0 conn=3 myRSS=2457 php=3 phpRSS=276 ap=21 tcp=30 topuser=otterfencing 2026-08-18 21:52:12 L1=3.22 run=5 blk=0 avail=6539 (55.7%) swpO=0 conn=2 myRSS=2457 php=3 phpRSS=458 ap=21 tcp=35 topuser=madalice 2026-08-18 21:52:12 L1=3.22 run=5 blk=0 avail=6533 (55.7%) swpO=0 conn=3 myRSS=2457 php=3 phpRSS=464 ap=21 tcp=35 topuser=madalice 2026-08-18 21:52:22 L1=2.94 run=7 blk=0 avail=6501 (55.4%) swpO=0 conn=2 myRSS=2457 php=4 phpRSS=519 ap=22 tcp=32 topuser=madalice 2026-08-18 21:52:22 L1=2.94 run=7 blk=1 avail=6493 (55.4%) swpO=0 conn=3 myRSS=2457 php=4 phpRSS=527 ap=22 tcp=32 topuser=madalice 2026-08-18 21:52:32 L1=2.80 run=2 blk=0 avail=6725 (57.3%) swpO=0 conn=2 myRSS=2457 php=1 phpRSS=211 ap=21 tcp=32 topuser=madalice 2026-08-18 21:52:32 L1=2.80 run=4 blk=0 avail=6716 (57.3%) swpO=0 conn=2 myRSS=2457 php=1 phpRSS=216 ap=21 tcp=30 topuser=madalice 2026-08-18 21:52:42 L1=2.99 run=1 blk=0 avail=6893 (58.8%) swpO=0 conn=2 myRSS=2457 php=0 phpRSS=0 ap=21 tcp=29 topuser=- 2026-08-18 21:52:42 L1=2.99 run=2 blk=0 avail=6892 (58.8%) swpO=0 conn=2 myRSS=2457 php=0 phpRSS=0 ap=21 tcp=29 topuser=- 2026-08-18 21:52:52 L1=2.68 run=3 blk=0 avail=6826 (58.2%) swpO=0 conn=2 myRSS=2457 php=2 phpRSS=157 ap=20 tcp=27 topuser=olympic 2026-08-18 21:52:52 L1=2.68 run=4 blk=0 avail=6817 (58.1%) swpO=0 conn=2 myRSS=2457 php=2 phpRSS=164 ap=20 tcp=27 topuser=olympic 2026-08-18 21:53:02 L1=2.72 run=13 blk=0 avail=5427 (46.3%) swpO=5 conn=11 myRSS=2457 php=10 phpRSS=1781 ap=27 tcp=40 topuser=madalice 2026-08-18 21:53:02 L1=2.72 run=14 blk=0 avail=5353 (45.6%) swpO=34 conn=11 myRSS=2457 php=10 phpRSS=1879 ap=27 tcp=40 topuser=madalice