INCIDENT 2026-08-20 00:30:14 trigger: php_rss=1615MB ================================================================== load: 1.59 1.38 1.21 14/642 3174478 ncpu:10 mem_avail: 5401MB/11729MB (46.0%) swap_used:2561MB swapout:0/s blocked(D):0 running:13 iowait:8.1% steal:0.0% php: 11 procs / 1615MB heaviest user: madalice (10 procs, 1546MB) apache: 18 procs tcp_estab: 37 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2716 madalice 10 1716 root 242 792 nobody 17 282 netdata 8 258 mailman 20 144 evolution 7 91 cpanellogin 1 61 kurri 4 47 dovenull 6 26 wp-toolkit 6 17 zabbix 1 15 mailnull 2 15 named 1 14 lowrange 1 12 corpkicks 1 12 aaa 1 12 nscd 1 6 dovecot 3 6 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1737 evolution 1 69 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5824 MB Active(file): 2422 MB Inactive(file): 2428 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 385 MB CommitLimit: 9960 MB Committed_AS: 8581 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2064673 root 23:18:59 2000 /usr/bin/imunify-agent-proxy 3156827 root 06:26 62016 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2773140 10.9 Ssl 4-16:39:38 /usr/sbin/mariadbd 3174438 3172628 madalice 234460 110 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174441 3172897 madalice 234240 112 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174440 3156375 madalice 231124 102 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174439 3157269 madalice 229260 111 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174442 3154408 madalice 209480 109 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 205540 2.5 Ssl 51-14:20:20 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3174444 3153463 madalice 205280 93.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174446 3158086 madalice 204908 94.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174445 3172649 madalice 185684 93.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2122939 2112450 root 176020 0.0 S 21:51:46 spamd child 3174447 3173645 madalice 139448 55.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3174449 3174448 madalice 106584 85.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 87024 0.0 Ss 4-16:39:41 /usr/lib/systemd/systemd-journald 3174210 3174178 evolution 71592 2.2 Ss 00:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 3141574 1353308 cpanellogin 63352 0.0 S 30:05 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 3156827 1 root 62016 0.5 Ssl 06:26 /opt/imunify360/venv/bin/python3 -m imav.run 2112450 1 root 60600 0.0 Ss 22:06:42 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2223 1201 root 49016 0.0 Sl 51-14:20:19 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2661802 2112450 root 47904 0.0 S 11:15:59 spamd child 1353308 1 root 41260 0.0 Ss 28-21:48:50 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 34452 0.1 Sl 51-14:20:15 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3141466 1 root 31576 0.0 Ss 30:13 lfd - sleeping 1469 1 root 28664 0.1 Ss 51-14:20:19 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3158094 1276780 nobody 21712 0.0 S 04:55 /usr/sbin/httpd -k start 3154408 1276780 nobody 21364 0.0 S 08:57 /usr/sbin/httpd -k start 3174223 3174184 root 20860 0.1 Ss 00:14 /usr/local/cpanel/bin/update_db_cache 3172204 1276780 nobody 20732 0.0 S 03:31 /usr/sbin/httpd -k start 3158086 1276780 nobody 20368 0.0 S 04:57 /usr/sbin/httpd -k start 3153463 1276780 nobody 19168 0.0 S 10:20 /usr/sbin/httpd -k start 3173101 1276780 nobody 18664 0.0 S 01:57 /usr/sbin/httpd -k start 3156375 1276780 nobody 18660 0.0 S 06:51 /usr/sbin/httpd -k start 3172897 1276780 nobody 18620 0.0 S 02:12 /usr/sbin/httpd -k start 3157269 1276780 nobody 18564 0.0 S 05:57 /usr/sbin/httpd -k start 3172649 1276780 nobody 18344 0.0 S 02:42 /usr/sbin/httpd -k start 3171641 1276780 nobody 17964 0.0 S 04:09 /usr/sbin/httpd -k start 3173645 1276780 nobody 17828 0.0 S 01:17 /usr/sbin/httpd -k start 3172628 1276780 nobody 17420 0.0 S 02:43 /usr/sbin/httpd -k start 3154419 1276780 nobody 17368 0.0 S 08:56 /usr/sbin/httpd -k start 1463 1 root 17012 0.0 Ss 51-14:20:19 tailwatchd 185104 2431 netdata 16632 2.1 Sl 7-03:56:38 /usr/libexec/netdata/plugins.d/apps.plugin 1 3152457 1471 root 16552 0.0 S 12:34 cPhulkd - dbprocessor 1204 1 zabbix 16128 0.2 Ssl 51-14:20:20 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3174488 1276780 nobody 15884 0.0 S 00:00 /usr/sbin/httpd -k start 3174487 1276780 nobody 15840 0.0 S 00:00 /usr/sbin/httpd -k start 3174448 1276780 nobody 15832 0.0 S 00:01 /usr/sbin/httpd -k start 1471 1 root 15560 0.0 Ss 51-14:20:19 cPhulkd - processor 2107664 1 named 15344 0.0 Ssl 22:07:34 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 3153429 1471 root 15004 0.0 S 10:25 cPhulkd - processor - http socket 3076766 3828812 lowrange 12852 0.0 S 01:24:49 dovecot/imap 3036636 3828812 aaa 12736 0.0 S 02:34:46 dovecot/imap 3174164 3828812 corpkicks 12300 0.0 S 00:15 dovecot/imap 3174413 3828812 kurri 12232 0.0 S 00:03 dovecot/imap 3145567 3828812 kurri 12044 0.0 S 23:11 dovecot/imap 3172333 3828812 kurri 12020 0.0 S 03:14 dovecot/imap 3081183 3828812 kurri 12008 0.0 S 01:18:06 dovecot/imap 3172827 3828812 root 11096 0.0 S 02:17 dovecot/auth -w 1276780 1 root 11064 0.0 Ss 14-08:58:55 /usr/sbin/httpd -k start 2107879 1 root 10596 0.0 Ss 22:07:33 queueprocd - waiting up to 60s to process a task 2111825 2111790 mailman 9456 0.0 S 22:07:11 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+-------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+-------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 14522805 | root | mysql | Query | 13 | Opening tables | SELECT TABLE_SCHEMA as DB,SUM(DATA_LENGTH)+SUM(INDEX_LENGTH) AS SPACEUSED from information_schema.tables WHERE TABLE_TYPE NOT LIKE '%view%' GROUP BY TABLE_SCHEMA | | 14522923 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+-------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min corpkicks/corporatekicks.com.au-ssl_log 124 aaa/aaadownunder.com.au-ssl_log 123 aaa/aaadownunder.com.au 121 speedlin/speedlinefencing.com.au-ssl_log 99 olympic/olympicfencing.com.au 36 olympic/olympicfencing.com.au-ssl_log 31 evolution/portal.evolutionerp.com.au-ssl_log 23 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 241 146.70.40.70 122 68.155.153.139 99 172.161.79.158 66 172.213.243.2 22 203.54.180.238 3 118.127.40.55 2 91.92.243.249 2 35.196.244.246 2 2a10:3c0:3:0:1:29:0:5 1 34.196.51.17 1 20.228.229.148 1 20.191.45.212 1 2001:4860:7:801::f9 1 192.178.8.66 1 185.226.197.37 --- top request paths across all vhosts (last 3 min) --- 22 GET /heartbeat.php 5 GET /chosen.php 4 GET /wp-login.php 4 GET /admin.php 3 POST /wp-cron.php 3 GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php 3 GET /wp-includes/customize/wp-login.php 3 GET /wp-includes/block-supports/autoload_classmap.php 3 GET /wp-content/themes/astra/inc/ki1k.php 3 GET /wp-content/index.php 3 GET /wp-admin/user/chosen.php 3 GET /index.php0 3 GET /doc.php 3 GET /byp.php 2 POST /wp-login.php 2 GET /wp.php 2 GET /wp-includes/Text/Diff/Engine/about.php 2 GET /wp-includes/SimplePie/wp-conflg.php 2 GET /wp-includes/customize/class-wp-customize-nav-menu-control.php 2 GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control.php --- busiest 3 vhosts: top paths + last 10 requests --- == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 3 GET /admin.php 1 POST /wp-cron.php 1 HEAD / 1 GET /zoo1.php 1 GET /yj09.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp-temp.php 1 GET /wp.php 1 GET /wp_motu_4r80b.php 1 GET /wp-manager.php 1 GET /wp-load.php -- last 10 requests -- 68.155.153.139 - - [20/Aug/2026:00:29:11 +1000] "GET /file.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:12 +1000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:12 +1000] "GET /key.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:13 +1000] "GET /kir.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:14 +1000] "GET /nofile.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:14 +1000] "GET /fling.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:15 +1000] "GET /zoo1.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:15 +1000] "GET /wp_motu_4r80b.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:16 +1000] "GET /btyuio.php HTTP/1.1" 401 36 "-" "-" 68.155.153.139 - - [20/Aug/2026:00:29:16 +1000] "GET /haxor.php HTTP/1.1" 401 36 "-" "-" == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 2 POST /wp-login.php 1 POST /wp-cron.php 1 GET /wp-includes/customize/wp-includes/ 1 GET /wp-includes/customize/class-wp-customize-nav-menu-control.php 1 GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control.php 1 GET /wp-includes/customize/class-wp-customize-media-control.php 1 GET /wp-includes/customize/class-wp-customize-image-control.php 1 GET /wp-includes/customize/class-wp-customize-header-image-setting.php 1 GET /wp-includes/customize/class-wp-customize-header-image-control.php 1 GET /wp-includes/customize/class-wp-customize-filter-setting.php 1 GET /wp-includes/customize/class-wp-customize-date-time-control.php 1 GET /wp-includes/customize/class-wp-customize-custom-css-setting.php -- last 10 requests -- 146.70.40.70 - - [20/Aug/2026:00:29:27 +1000] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:29 +1000] "GET /wp-includes/customize/class-wp-customize-custom-css-setting.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:30 +1000] "GET /wp-includes/customize/class-wp-customize-date-time-control.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:31 +1000] "GET /wp-includes/customize/class-wp-customize-filter-setting.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:33 +1000] "GET /wp-includes/customize/class-wp-customize-header-image-control.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:34 +1000] "GET /wp-includes/customize/class-wp-customize-header-image-setting.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:35 +1000] "GET /wp-includes/customize/class-wp-customize-image-control.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:37 +1000] "GET /wp-includes/customize/class-wp-customize-media-control.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:38 +1000] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control.php HTTP/1.1" 500 - "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:39 +1000] "GET /wp-includes/customize/class-wp-customize-nav-menu-control.php HTTP/1.1" 500 - "-" "-" == aaa/aaadownunder.com.au == -- top paths -- 1 GET /wp-includes/customize//wp-includes/ 1 GET /wp-includes/customize/class-wp-customize-nav-menu-item-control.php 1 GET /wp-includes/customize/class-wp-customize-nav-menu-control.php 1 GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control.php 1 GET /wp-includes/customize/class-wp-customize-media-control.php 1 GET /wp-includes/customize/class-wp-customize-image-control.php 1 GET /wp-includes/customize/class-wp-customize-header-image-setting.php 1 GET /wp-includes/customize/class-wp-customize-header-image-control.php 1 GET /wp-includes/customize/class-wp-customize-filter-setting.php 1 GET /wp-includes/customize/class-wp-customize-date-time-control.php 1 GET /wp-includes/customize/class-wp-customize-custom-css-setting.php 1 GET /wp-includes/customize/class-wp-customize-cropped-image-control.php -- last 10 requests -- 146.70.40.70 - - [20/Aug/2026:00:29:28 +1000] "GET /wp-includes/customize/class-wp-customize-custom-css-setting.php HTTP/1.1" 301 339 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:29 +1000] "GET /wp-includes/customize/class-wp-customize-date-time-control.php HTTP/1.1" 301 338 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:30 +1000] "GET /wp-includes/customize/class-wp-customize-filter-setting.php HTTP/1.1" 301 335 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:32 +1000] "GET /wp-includes/customize/class-wp-customize-header-image-control.php HTTP/1.1" 301 341 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:33 +1000] "GET /wp-includes/customize/class-wp-customize-header-image-setting.php HTTP/1.1" 301 341 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:34 +1000] "GET /wp-includes/customize/class-wp-customize-image-control.php HTTP/1.1" 301 334 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:36 +1000] "GET /wp-includes/customize/class-wp-customize-media-control.php HTTP/1.1" 301 334 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:37 +1000] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control.php HTTP/1.1" 301 346 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:38 +1000] "GET /wp-includes/customize/class-wp-customize-nav-menu-control.php HTTP/1.1" 301 337 "-" "-" 146.70.40.70 - - [20/Aug/2026:00:29:40 +1000] "GET /wp-includes/customize/class-wp-customize-nav-menu-item-control.php HTTP/1.1" 301 342 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-20 00:27:51 L1=1.42 run=3 blk=0 avail=6601 (56.3%) swpO=0 conn=3 myRSS=2671 php=2 phpRSS=159 ap=20 tcp=27 topuser=olympic 2026-08-20 00:27:53 L1=1.39 run=3 blk=0 avail=6612 (56.4%) swpO=0 conn=4 myRSS=2671 php=2 phpRSS=157 ap=18 tcp=24 topuser=olympic 2026-08-20 00:28:01 L1=1.44 run=2 blk=0 avail=6665 (56.8%) swpO=0 conn=3 myRSS=2671 php=2 phpRSS=92 ap=18 tcp=31 topuser=olympic 2026-08-20 00:28:03 L1=1.40 run=3 blk=0 avail=6550 (55.8%) swpO=0 conn=4 myRSS=2671 php=2 phpRSS=183 ap=21 tcp=31 topuser=olympic 2026-08-20 00:28:11 L1=1.37 run=3 blk=0 avail=6564 (56.0%) swpO=0 conn=3 myRSS=2671 php=2 phpRSS=165 ap=21 tcp=32 topuser=olympic 2026-08-20 00:28:13 L1=1.34 run=3 blk=0 avail=6565 (56.0%) swpO=0 conn=4 myRSS=2671 php=2 phpRSS=164 ap=21 tcp=35 topuser=olympic 2026-08-20 00:28:21 L1=1.31 run=3 blk=0 avail=6603 (56.3%) swpO=0 conn=2 myRSS=2671 php=2 phpRSS=100 ap=25 tcp=32 topuser=olympic 2026-08-20 00:28:23 L1=1.29 run=2 blk=0 avail=6530 (55.7%) swpO=0 conn=4 myRSS=2671 php=1 phpRSS=140 ap=23 tcp=32 topuser=olympic 2026-08-20 00:28:31 L1=1.42 run=4 blk=0 avail=6610 (56.4%) swpO=0 conn=2 myRSS=2671 php=2 phpRSS=94 ap=23 tcp=31 topuser=olympic 2026-08-20 00:28:33 L1=1.31 run=5 blk=0 avail=6638 (56.6%) swpO=0 conn=4 myRSS=2671 php=0 phpRSS=0 ap=23 tcp=29 topuser=- 2026-08-20 00:28:41 L1=1.28 run=1 blk=0 avail=6672 (56.9%) swpO=0 conn=2 myRSS=2671 php=1 phpRSS=39 ap=22 tcp=26 topuser=evolution 2026-08-20 00:28:44 L1=1.34 run=4 blk=0 avail=6421 (54.7%) swpO=0 conn=3 myRSS=2671 php=3 phpRSS=350 ap=21 tcp=31 topuser=tubesupplies 2026-08-20 00:28:51 L1=1.31 run=1 blk=0 avail=6670 (56.9%) swpO=0 conn=2 myRSS=2671 php=1 phpRSS=40 ap=21 tcp=30 topuser=evolution 2026-08-20 00:28:54 L1=1.29 run=1 blk=0 avail=6685 (57.0%) swpO=1 conn=3 myRSS=2671 php=0 phpRSS=0 ap=21 tcp=28 topuser=- 2026-08-20 00:29:01 L1=1.51 run=1 blk=0 avail=6650 (56.7%) swpO=1 conn=2 myRSS=2671 php=1 phpRSS=40 ap=22 tcp=29 topuser=evolution 2026-08-20 00:29:04 L1=1.63 run=2 blk=0 avail=6338 (54.0%) swpO=0 conn=3 myRSS=2671 php=2 phpRSS=396 ap=22 tcp=31 topuser=corpkicks 2026-08-20 00:29:11 L1=1.58 run=2 blk=0 avail=6607 (56.3%) swpO=0 conn=2 myRSS=2671 php=2 phpRSS=118 ap=22 tcp=26 topuser=olympic 2026-08-20 00:29:14 L1=1.45 run=1 blk=0 avail=6671 (56.9%) swpO=0 conn=3 myRSS=2671 php=0 phpRSS=0 ap=22 tcp=27 topuser=- 2026-08-20 00:29:21 L1=1.49 run=1 blk=0 avail=6659 (56.8%) swpO=0 conn=2 myRSS=2671 php=1 phpRSS=39 ap=22 tcp=28 topuser=evolution 2026-08-20 00:29:24 L1=1.69 run=2 blk=0 avail=6570 (56.0%) swpO=0 conn=3 myRSS=2671 php=2 phpRSS=159 ap=22 tcp=30 topuser=aaa 2026-08-20 00:29:31 L1=1.64 run=2 blk=0 avail=6589 (56.2%) swpO=0 conn=2 myRSS=2671 php=2 phpRSS=138 ap=22 tcp=25 topuser=madalice 2026-08-20 00:29:34 L1=1.67 run=3 blk=0 avail=6585 (56.1%) swpO=0 conn=3 myRSS=2671 php=1 phpRSS=119 ap=22 tcp=27 topuser=olympic 2026-08-20 00:29:41 L1=1.53 run=1 blk=0 avail=6676 (56.9%) swpO=0 conn=2 myRSS=2671 php=1 phpRSS=40 ap=20 tcp=24 topuser=evolution 2026-08-20 00:29:44 L1=1.49 run=2 blk=0 avail=6521 (55.6%) swpO=0 conn=2 myRSS=2671 php=1 phpRSS=197 ap=19 tcp=25 topuser=madalice 2026-08-20 00:29:51 L1=1.37 run=2 blk=0 avail=6641 (56.6%) swpO=0 conn=2 myRSS=2671 php=2 phpRSS=119 ap=19 tcp=22 topuser=corpkicks 2026-08-20 00:29:54 L1=1.26 run=1 blk=0 avail=6704 (57.2%) swpO=0 conn=2 myRSS=2671 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-20 00:30:02 L1=1.16 run=2 blk=0 avail=6599 (56.3%) swpO=0 conn=2 myRSS=2673 php=3 phpRSS=160 ap=17 tcp=25 topuser=evolution 2026-08-20 00:30:04 L1=1.23 run=2 blk=1 avail=6570 (56.0%) swpO=0 conn=2 myRSS=2683 php=2 phpRSS=158 ap=17 tcp=26 topuser=olympic 2026-08-20 00:30:12 L1=1.21 run=1 blk=0 avail=6594 (56.2%) swpO=0 conn=2 myRSS=2716 php=2 phpRSS=110 ap=17 tcp=23 topuser=evolution 2026-08-20 00:30:14 L1=1.59 run=13 blk=0 avail=5401 (46.0%) swpO=0 conn=13 myRSS=2717 php=11 phpRSS=1615 ap=18 tcp=37 topuser=madalice