INCIDENT 2026-08-18 22:03:05 trigger: blocked=11 ================================================================== load: 2.93 2.16 2.04 1/659 1934242 ncpu:10 mem_avail: 3814MB/11729MB (32.5%) swap_used:2604MB swapout:1317/s blocked(D):11 running:1 iowait:44.0% steal:0.0% php: 5 procs / 700MB heaviest user: madalice (4 procs, 633MB) apache: 20 procs tcp_estab: 35 --- RSS by user (all processes) --- USER PROCS RSS_MB evolution 8 2818 mysql 1 2384 root 244 695 madalice 4 633 nobody 19 291 netdata 8 247 corpkicks 1 66 alison 5 65 cpanellogin 1 59 kurri 5 57 mailnull 2 27 dovenull 6 26 lowrange 2 25 wp-toolkit 6 18 zabbix 1 13 aaa 1 13 mailman 20 12 infinium 1 12 nscd 1 8 dovecot 3 7 --- php workers by user --- USER PROCS RSS_MB madalice 4 633 corpkicks 1 66 evolution 1 39 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3890 MB Active(file): 1236 MB Inactive(file): 2363 MB Dirty: 764 MB Writeback: 12 MB SReclaimable: 401 MB CommitLimit: 9960 MB Committed_AS: 10198 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 20:51:49 1536 /usr/bin/imunify-agent-proxy 1931767 root 03:05 3124 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1933971 1933970 evolution 2793308 66.8 DNs 00:24 /usr/local/cpanel/3rdparty/bin/analog +CIMAGEDIR /images/ +CDOMAINSFILE /usr/local/cpanel/3rdparty/share/analog/usdom.tab +CCHARTDIR ./ 2575700 1 mysql 2441260 10.5 Ssl 3-14:12:28 /usr/sbin/mariadbd 1220 1 netdata 199520 2.5 Dsl 50-11:53:10 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1934155 1934075 madalice 183712 23.8 D 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1934145 1927547 madalice 183436 18.8 D 00:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1000361 998750 root 172460 0.0 S 19:38:16 spamd child 1934203 1932069 madalice 147060 60.0 D 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1934201 1932074 madalice 134484 36.3 D 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1578009 998750 root 94580 0.0 S 08:20:37 spamd child 998750 1 root 89444 0.0 Ss 19:40:21 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1934193 1932371 corpkicks 68308 6.0 D 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1917418 1353308 cpanellogin 60752 0.0 S 26:00 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1934240 1934063 evolution 40936 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 40324 0.0 Ss 27-19:21:40 cpsrvd (SSL) - waiting for connections 2223 1201 root 40072 0.0 Sl 50-11:53:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1932143 3651816 root 39356 0.6 SN 02:36 cpanellogd - waiting for child to process logs for evolution 1933919 1932143 evolution 37732 0.1 SN 00:29 cpanellogd - http logs for evolution 2575382 1 root 33576 0.0 Ss 3-14:12:31 /usr/lib/systemd/systemd-journald 4922 2431 netdata 30888 0.1 Sl 50-11:53:05 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1932616 1932582 root 23412 0.0 S 01:51 /usr/sbin/exim -q 1932075 1276780 nobody 21916 0.1 S 02:42 /usr/sbin/httpd -k start 1930262 1276780 nobody 21692 0.0 S 05:50 /usr/sbin/httpd -k start 1932074 1276780 nobody 21552 0.1 S 02:42 /usr/sbin/httpd -k start 1932069 1276780 nobody 21448 0.2 S 02:43 /usr/sbin/httpd -k start 1930941 1276780 nobody 20824 0.0 S 04:29 /usr/sbin/httpd -k start 1932618 1932616 mailnull 20428 0.0 S 01:51 /usr/sbin/exim -q 998083 1 root 19876 0.0 Ss 19:40:54 lfd - sleeping 1469 1 root 18708 0.1 Ds 50-11:53:09 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1932371 1276780 nobody 18576 0.0 S 02:12 /usr/sbin/httpd -k start 1932729 1276780 nobody 18248 0.0 S 01:44 /usr/sbin/httpd -k start 1933474 1276780 nobody 17244 0.0 S 00:53 /usr/sbin/httpd -k start 1463 1 root 16708 0.0 Ss 50-11:53:09 tailwatchd 1932737 1276780 nobody 16708 0.0 S 01:43 /usr/sbin/httpd -k start 1924244 1276780 nobody 16608 0.0 S 14:49 /usr/sbin/httpd -k start 185104 2431 netdata 16284 2.0 Sl 6-01:29:28 /usr/libexec/netdata/plugins.d/apps.plugin 1 1927547 1276780 nobody 16264 0.0 S 10:05 /usr/sbin/httpd -k start 1933752 1276780 nobody 16124 0.0 S 00:38 /usr/sbin/httpd -k start 1928433 1276780 nobody 15940 0.0 S 08:45 /usr/sbin/httpd -k start 1934075 1276780 nobody 14632 0.0 S 00:13 /usr/sbin/httpd -k start 1934063 1276780 nobody 14472 0.0 S 00:15 /usr/sbin/httpd -k start 1928181 3828812 alison 14272 5.3 S 09:20 dovecot/imap 1928179 3828812 alison 13816 0.7 S 09:20 dovecot/imap 1928180 3828812 alison 13524 0.0 S 09:20 dovecot/imap 1928352 3828812 aaa 13468 0.0 S 08:54 dovecot/imap 1204 1 zabbix 13448 0.2 Ssl 50-11:53:10 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1913119 3828812 alison 13448 0.0 S 32:23 dovecot/imap 1109893 1471 root 13404 0.0 S 16:37:49 cPhulkd - dbprocessor 1932744 3828812 lowrange 13308 0.0 S 01:42 dovecot/pop3 1919264 3828812 lowrange 12604 0.0 S 23:10 dovecot/imap 1928178 3828812 alison 12408 0.0 S 09:20 dovecot/imap 1934205 1928433 nobody 12320 1.0 D 00:02 /usr/sbin/httpd -k start 1927446 3828812 infinium 12316 0.0 S 10:14 dovecot/imap 1912765 3828812 kurri 11984 0.0 S 32:57 dovecot/imap 1926480 3828812 kurri 11896 0.0 S 11:37 dovecot/imap 1916397 3828812 kurri 11804 0.0 S 27:30 dovecot/imap 1926484 3828812 kurri 11716 0.0 S 11:37 dovecot/imap 1932582 281734 root 11596 0.0 S 01:52 /usr/sbin/exim -q 1916409 3828812 kurri 11528 0.0 S 27:30 dovecot/imap 1934204 1276780 nobody 10596 0.0 S 00:02 /usr/sbin/httpd -k start 1471 1 root 8864 0.0 Ss 50-11:53:09 cPhulkd - processor --- processes in D state (uninterruptible IO) --- 121 D - [kswapd0] 1220 Dsl - /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1469 Ds - cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1414384 D - [kworker/u256:0+flush-8:0] 1933971 DNs - /usr/local/cpanel/3rdparty/bin/analog +CIMAGEDIR /images/ +CDOMAINSFILE /usr/local/cpanel/3rdparty/share/analog/usdom.tab +CCHARTDIR ./ +CALLCHART ON +CLANGFILE / 1934145 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1934155 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1934193 D - /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1934201 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1934203 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1934205 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10031442 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min cosgrovecreative/cosgrovecreative.com.au 139 madalice/madalice.com.au-ssl_log 104 nrg/nrgservices.net.au-ssl_log 91 customc/customcentral.com.au-ssl_log 39 evolution/portal.evolutionerp.com.au-ssl_log 17 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 138 20.65.105.233 93 146.70.194.236 91 20.42.19.40 39 20.1.169.243 17 203.54.180.238 2 202.153.211.134 2 118.127.40.55 2 114.119.140.234 1 66.249.65.169 1 52.167.144.228 1 114.119.159.70 1 114.119.131.88 1 114.119.130.40 1 103.59.160.220 --- top request paths across all vhosts (last 3 min) --- 17 GET /heartbeat.php 4 POST /wp-admin/admin-ajax.php 4 GET /store/custom-rainbow-fade-monogram-shoes/ 3 GET /as.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /wp-content/admin.php 2 GET /this_is_a_new_hello_world.php 2 GET /lock360.php 2 GET /lite.php 2 GET /inputs.php 2 GET /fff.php 2 GET /ff1.php 2 GET /edit.php 2 GET /atomlib.php 2 GET /admin.php 2 GET /adminfuns.php 2 GET /about.php 2 GET /222.php 2 GET / 1 GET /zz.php --- busiest 3 vhosts: top paths + last 10 requests --- == cosgrovecreative/cosgrovecreative.com.au == -- top paths -- 1 GET /zz.php 1 GET /zxin.php 1 GET /zwq13.php 1 GET /z.php 1 GET /ze.php 1 GET /zc-318.php 1 GET /xxx.php 1 GET /xqq.php 1 GET /xmy.php 1 GET /xleet.php 1 GET /xda.php 1 GET /xa.php -- last 10 requests -- 20.65.105.233 - - [18/Aug/2026:22:02:09 +1000] "GET /wqqs.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:09 +1000] "GET /clasa99.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:09 +1000] "GET /666.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:09 +1000] "GET /thui.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:09 +1000] "GET /agg.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:10 +1000] "GET /erty.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:10 +1000] "GET /mini.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:10 +1000] "GET /sid3.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:10 +1000] "GET /moon.php HTTP/1.1" 404 - "-" "-" 20.65.105.233 - - [18/Aug/2026:22:02:10 +1000] "GET /ms.php HTTP/1.1" 404 - "-" "-" == madalice/madalice.com.au-ssl_log == -- top paths -- 4 POST /wp-admin/admin-ajax.php 4 GET /store/custom-rainbow-fade-monogram-shoes/ 1 GET /wp-content/plugins/woocommerce/templates/wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/templates//wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/templates/brands/wp-content/plugins/woocommerce/templates/ 1 GET /wp-content/plugins/woocommerce/templates/brands//wp-content/plugins/woocommerce/templates/ 1 GET /wp-content/plugins/woocommerce/templates/brands/widgets/wp-content/plugins/woocommerce/templates/brands/ 1 GET /wp-content/plugins/woocommerce/templates/brands/widgets//wp-content/plugins/woocommerce/templates/brands/ 1 GET /wp-content/plugins/woocommerce/templates/brands/widgets/brand-thumbnails-description.php 1 GET /wp-content/plugins/woocommerce/templates/brands/widgets/brand-description.php 1 GET /wp-content/plugins/woocommerce/templates/brands/widgets/ 1 GET /wp-content/plugins/woocommerce/templates/brands/taxonomy-product_brand.php -- last 10 requests -- 146.70.194.236 - - [18/Aug/2026:22:02:32 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/shortcodes/brands-a-z.php HTTP/1.1" 200 57 "-" "-" 146.70.194.236 - - [18/Aug/2026:22:02:32 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/shortcodes/single-brand.php HTTP/1.1" 200 13 "-" "-" 146.70.194.236 - - [18/Aug/2026:22:02:33 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/taxonomy-product_brand.php HTTP/1.1" 500 1 "-" "-" 118.127.40.55 - - [18/Aug/2026:22:02:26 +1000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=361abb2bd2 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://madalice.com.au" 146.70.194.236 - - [18/Aug/2026:22:02:34 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/widgets/ HTTP/1.1" 200 353 "-" "-" 146.70.194.236 - - [18/Aug/2026:22:02:34 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/widgets//wp-content/plugins/woocommerce/templates/brands/ HTTP/1.1" 301 1 "-" "-" 114.119.140.234 - - [18/Aug/2026:22:02:36 +1000] "GET /store/custom-rabbitohs-shoes/?wcpr_rating=2 HTTP/1.1" 404 30570 "https://madalice.com.au/store/custom-rabbitohs-shoes/?wcpr_rating=2" "Mozilla/5.0 (Linux; Android 7. 146.70.194.236 - - [18/Aug/2026:22:02:37 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/widgets/wp-content/plugins/woocommerce/templates/brands/ HTTP/1.1" 404 30585 "-" "-" 146.70.194.236 - - [18/Aug/2026:22:02:40 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/widgets/brand-description.php HTTP/1.1" 500 1 "-" "-" 146.70.194.236 - - [18/Aug/2026:22:02:41 +1000] "GET /wp-content/plugins/woocommerce/templates/brands/widgets/brand-thumbnails-description.php HTTP/1.1" 200 49 "-" "-" == nrg/nrgservices.net.au-ssl_log == -- top paths -- 2 GET /inputs.php 2 GET /edit.php 2 GET /as.php 2 GET /admin.php 2 GET /adminfuns.php 2 GET /about.php 1 GET /x.php 1 GET /xmr.php 1 GET /xfun.php 1 GET /wp.php 1 GET /wp-includes/class-wp-http-client.php 1 GET /w.php -- last 10 requests -- 20.42.19.40 - - [18/Aug/2026:22:02:48 +1000] "GET /admin.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:49 +1000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:50 +1000] "GET /as.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:50 +1000] "GET /bolt.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:51 +1000] "GET /cgi-bin/ HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:51 +1000] "GET /class-t.api.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:52 +1000] "GET /edit.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:53 +1000] "GET /ff1.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:54 +1000] "GET /fff.php HTTP/1.1" 401 36 "-" "-" 20.42.19.40 - - [18/Aug/2026:22:02:54 +1000] "GET /inputs.php HTTP/1.1" 401 36 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-18 22:00:45 L1=1.63 run=2 blk=1 avail=6936 (59.1%) swpO=0 conn=2 myRSS=2445 php=0 phpRSS=0 ap=19 tcp=30 topuser=- 2026-08-18 22:00:45 L1=1.63 run=1 blk=0 avail=6934 (59.1%) swpO=0 conn=1 myRSS=2445 php=0 phpRSS=0 ap=19 tcp=30 topuser=- 2026-08-18 22:00:55 L1=1.82 run=2 blk=0 avail=6924 (59.0%) swpO=0 conn=2 myRSS=2445 php=0 phpRSS=0 ap=20 tcp=30 topuser=- 2026-08-18 22:00:55 L1=1.82 run=1 blk=0 avail=6921 (59.0%) swpO=0 conn=1 myRSS=2445 php=0 phpRSS=0 ap=20 tcp=31 topuser=- 2026-08-18 22:01:05 L1=1.70 run=3 blk=0 avail=6409 (54.6%) swpO=0 conn=2 myRSS=2445 php=1 phpRSS=262 ap=17 tcp=27 topuser=madalice 2026-08-18 22:01:05 L1=1.70 run=1 blk=0 avail=6951 (59.3%) swpO=0 conn=1 myRSS=2445 php=0 phpRSS=0 ap=16 tcp=28 topuser=- 2026-08-18 22:01:15 L1=1.75 run=3 blk=0 avail=6021 (51.3%) swpO=0 conn=2 myRSS=2445 php=1 phpRSS=260 ap=16 tcp=32 topuser=madalice 2026-08-18 22:01:15 L1=1.75 run=2 blk=0 avail=6701 (57.1%) swpO=0 conn=1 myRSS=2445 php=1 phpRSS=260 ap=16 tcp=31 topuser=madalice 2026-08-18 22:01:25 L1=1.72 run=2 blk=0 avail=6538 (55.7%) swpO=0 conn=2 myRSS=2445 php=2 phpRSS=289 ap=19 tcp=31 topuser=corpkicks 2026-08-18 22:01:25 L1=1.72 run=1 blk=0 avail=6675 (56.9%) swpO=0 conn=1 myRSS=2445 php=1 phpRSS=261 ap=19 tcp=32 topuser=corpkicks 2026-08-18 22:01:35 L1=1.45 run=3 blk=0 avail=6889 (58.7%) swpO=0 conn=1 myRSS=2445 php=0 phpRSS=0 ap=19 tcp=29 topuser=- 2026-08-18 22:01:36 L1=1.45 run=4 blk=0 avail=6889 (58.7%) swpO=0 conn=2 myRSS=2445 php=1 phpRSS=39 ap=18 tcp=29 topuser=evolution 2026-08-18 22:01:45 L1=1.46 run=2 blk=0 avail=6752 (57.6%) swpO=0 conn=1 myRSS=2445 php=1 phpRSS=214 ap=17 tcp=27 topuser=madalice 2026-08-18 22:01:46 L1=1.46 run=1 blk=0 avail=6920 (59.0%) swpO=0 conn=2 myRSS=2445 php=1 phpRSS=40 ap=16 tcp=28 topuser=evolution 2026-08-18 22:01:55 L1=1.39 run=1 blk=0 avail=6935 (59.1%) swpO=0 conn=1 myRSS=2445 php=0 phpRSS=0 ap=16 tcp=25 topuser=- 2026-08-18 22:01:56 L1=1.39 run=1 blk=0 avail=6922 (59.0%) swpO=0 conn=2 myRSS=2445 php=1 phpRSS=39 ap=16 tcp=26 topuser=evolution 2026-08-18 22:02:05 L1=1.49 run=3 blk=0 avail=6588 (56.2%) swpO=0 conn=1 myRSS=2445 php=3 phpRSS=246 ap=16 tcp=29 topuser=corpkicks 2026-08-18 22:02:06 L1=1.49 run=2 blk=0 avail=6905 (58.9%) swpO=0 conn=2 myRSS=2445 php=2 phpRSS=105 ap=16 tcp=28 topuser=madalice 2026-08-18 22:02:15 L1=1.49 run=2 blk=0 avail=6794 (57.9%) swpO=0 conn=1 myRSS=2445 php=1 phpRSS=167 ap=17 tcp=31 topuser=madalice 2026-08-18 22:02:16 L1=1.49 run=3 blk=0 avail=6719 (57.3%) swpO=0 conn=2 myRSS=2445 php=3 phpRSS=307 ap=17 tcp=33 topuser=madalice 2026-08-18 22:02:25 L1=1.56 run=3 blk=0 avail=6795 (57.9%) swpO=0 conn=1 myRSS=2445 php=1 phpRSS=146 ap=18 tcp=30 topuser=madalice 2026-08-18 22:02:26 L1=1.56 run=2 blk=0 avail=6736 (57.4%) swpO=0 conn=2 myRSS=2445 php=2 phpRSS=234 ap=18 tcp=32 topuser=madalice 2026-08-18 22:02:35 L1=1.55 run=2 blk=0 avail=6785 (57.9%) swpO=0 conn=2 myRSS=2445 php=1 phpRSS=147 ap=19 tcp=33 topuser=madalice 2026-08-18 22:02:36 L1=1.55 run=2 blk=0 avail=6725 (57.3%) swpO=0 conn=3 myRSS=2445 php=2 phpRSS=237 ap=19 tcp=35 topuser=madalice 2026-08-18 22:02:45 L1=1.55 run=3 blk=0 avail=5803 (49.5%) swpO=28 conn=2 myRSS=2445 php=1 phpRSS=99 ap=18 tcp=27 topuser=madalice 2026-08-18 22:02:46 L1=1.55 run=4 blk=0 avail=5570 (47.5%) swpO=40 conn=3 myRSS=2445 php=2 phpRSS=187 ap=18 tcp=27 topuser=madalice 2026-08-18 22:02:55 L1=1.99 run=3 blk=0 avail=4195 (35.8%) swpO=1299 conn=2 myRSS=2421 php=1 phpRSS=120 ap=19 tcp=28 topuser=infinium 2026-08-18 22:02:56 L1=1.99 run=3 blk=0 avail=4194 (35.8%) swpO=1378 conn=3 myRSS=2418 php=2 phpRSS=159 ap=19 tcp=28 topuser=infinium 2026-08-18 22:03:05 L1=2.93 run=1 blk=11 avail=3814 (32.5%) swpO=1317 conn=6 myRSS=2384 php=5 phpRSS=700 ap=20 tcp=35 topuser=madalice 2026-08-18 22:03:06 L1=2.93 run=7 blk=4 avail=3780 (32.2%) swpO=1355 conn=3 myRSS=2379 php=6 phpRSS=770 ap=20 tcp=32 topuser=madalice