INCIDENT 2026-08-19 02:22:52 trigger: blocked=14 ================================================================== load: 3.05 1.30 0.87 5/661 2110998 ncpu:10 mem_avail: 6956MB/11729MB (59.3%) swap_used:2524MB swapout:0/s blocked(D):14 running:6 iowait:2.9% steal:0.0% php: 1 procs / 53MB heaviest user: speedlin (1 procs, 53MB) apache: 17 procs tcp_estab: 28 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2393 root 256 860 netdata 8 253 mailman 20 107 nobody 16 67 kurri 5 58 speedlin 1 57 named 1 54 infinium 3 35 dovenull 6 26 lowrange 2 24 mailnull 3 21 wp-toolkit 6 20 zabbix 1 14 cpanellogin 1 13 aaa 1 13 evolution 4 12 nscd 1 8 dovecot 3 7 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB speedlin 1 58 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5606 MB Active(file): 2976 MB Inactive(file): 2922 MB Dirty: 42 MB Writeback: 0 MB SReclaimable: 663 MB CommitLimit: 9960 MB Committed_AS: 6377 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2064673 root 01:11:36 8912 /usr/bin/imunify-agent-proxy 2104369 root 03:54 58088 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2451352 10.2 Ssl 3-18:32:15 /usr/sbin/mariadbd 1220 1 netdata 204724 2.5 Ssl 50-16:12:57 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000361 998750 root 165868 0.0 S 23:58:03 spamd child 1578009 998750 root 80124 0.0 S 12:40:24 spamd child 998750 1 root 79028 0.0 Ss 1-00:00:08 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2110969 2105758 speedlin 64008 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2104369 1 root 58088 0.5 Ssl 03:54 /opt/imunify360/venv/bin/python3 -m imav.run 2107664 1 named 56096 0.5 Ssl 00:11 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1353308 1 root 41784 0.0 Ss 27-23:41:27 cpsrvd (SSL) - waiting for connections 2223 1201 root 40640 0.0 Sl 50-16:12:56 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 31900 0.1 Sl 50-16:12:52 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2018527 1 root 31088 0.0 Ss 02:22:51 lfd - sleeping 2575382 1 root 29952 0.0 Ss 3-18:32:18 /usr/lib/systemd/systemd-journald 1463 1 root 23808 0.0 Ss 50-16:12:56 tailwatchd 1469 1 root 18876 0.1 Ss 50-16:12:56 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2107879 1 root 18592 1.3 Ss 00:10 queueprocd - waiting up to 1s to process a task 2105542 1276780 nobody 18460 0.0 S 02:25 /usr/sbin/httpd -k start 2110784 2110782 root 18376 2.1 Sl 00:07 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/refresh-dkim-validity-cache --all-domains 2110943 2110941 root 17688 2.0 S 00:01 /usr/local/cpanel/etc/init/stopmailman --no-verbose 2105420 1276780 nobody 17356 0.0 S 02:26 /usr/sbin/httpd -k start 2111032 2111031 root 17028 0.0 R 00:00 /usr/local/cpanel/scripts/restartsrv_nscd 2075369 1471 root 16956 0.0 S 53:51 cPhulkd - dbprocessor 2110862 2107879 root 16804 1.0 S 00:02 queueprocd - process - apache_restart - safeaprestart - doing restart 185104 2431 netdata 16600 2.0 Sl 6-05:49:15 /usr/libexec/netdata/plugins.d/apps.plugin 1 2111034 2107879 root 16104 0.0 S 00:00 queueprocd - process - verify_api_spec_files 2111031 2107879 root 16096 0.0 S 00:00 queueprocd - process - restartsrv 2111033 2107879 root 16088 0.0 S 00:00 queueprocd - process - checkphpini_and_install_php_inis 2105711 1276780 nobody 16024 0.0 S 02:23 /usr/sbin/httpd -k start 2105758 1276780 nobody 15792 0.0 S 02:22 /usr/sbin/httpd -k start 1471 1 root 15712 0.0 Ss 50-16:12:56 cPhulkd - processor 2110782 2107879 root 15632 0.0 S 00:07 queueprocd - process - refresh_entire_dkim_validity_cache 2103880 1471 root 15316 0.0 S 05:00 cPhulkd - processor - http socket 1204 1 zabbix 14948 0.2 Ssl 50-16:12:57 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2106957 2106953 root 14640 0.0 Ss 00:51 cPanel Update (upcp) - Slave 2111035 2107879 root 14024 0.0 S 00:00 queueprocd - process next queued task 1963074 3828812 aaa 13752 0.0 S 03:35:31 dovecot/imap 2110907 1353308 cpanellogin 13596 0.0 S 00:01 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1934539 3828812 lowrange 12888 0.0 S 04:19:36 dovecot/imap 2106953 2106942 root 12464 0.0 S 00:51 cPanel Update (upcp) - Master 1940215 3828812 lowrange 12328 0.0 S 04:12:08 dovecot/imap 2104401 3828812 infinium 12300 0.0 S 03:53 dovecot/imap 2097160 3828812 infinium 12280 0.0 S 16:11 dovecot/imap 2086885 3828812 infinium 12212 0.0 S 33:17 dovecot/imap 2110968 3828812 kurri 12204 0.0 S 00:00 dovecot/imap 2081831 3828812 kurri 12064 0.0 S 42:29 dovecot/imap 2096082 3828812 kurri 12024 0.0 S 17:44 dovecot/imap 2094805 3828812 kurri 11808 0.0 S 19:34 dovecot/imap 2094806 3828812 kurri 11672 0.0 S 19:33 dovecot/imap 2111038 2111035 root 11640 0.0 D 00:00 /usr/local/cpanel/bin/rebuild-templates --quiet --force 2110938 2110813 root 11144 78.0 R 00:01 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/etc/init/startup --skip-queueprocd 2110890 3828812 root 11064 1.0 S 00:01 dovecot/auth -w 2110941 2110938 root 10240 0.0 S 00:01 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/etc/init/startup --skip-queueprocd 1276780 1 root 9536 0.0 Ss 13-10:51:32 /usr/sbin/httpd -k start 281894 281875 mailman 8940 0.0 D 10-00:00:43 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 2064673 1 root 8912 0.0 Ssl 01:11:36 /usr/bin/imunify-agent-proxy 281888 281875 mailman 8888 0.0 D 10-00:00:43 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 281890 281875 mailman 8708 0.0 D 10-00:00:43 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 3651378 1 nscd 8672 0.0 Ssl 10-23:59:59 /usr/sbin/nscd 281901 281875 mailman 8468 0.0 D 10-00:00:43 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 1059098 3828812 dovenull 8388 0.0 S 5-10:50:02 dovecot/imap-login --- processes in D state (uninterruptible IO) --- 281883 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s 281885 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 281886 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 281887 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 281888 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 281889 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 281890 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 281891 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 281894 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 281895 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 281899 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 281901 D - /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 2111043 D - /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/verify_api_spec_files --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10079783 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min aaa/aaadownunder.com.au-ssl_log 536 candyfabcom/candyfab.com.au-ssl_log 145 kurri/kurrimotorinn.com.au-ssl_log 93 speedlin/speedlinefencing.com.au-ssl_log 57 evolution/evolutionerp.com.au-ssl_log 54 evolution/portal.evolutionerp.com.au-ssl_log 24 evolution/my.evolutionerp.com.au-ssl_log 11 evolution/release.evolutionerp.com.au 10 madalice/madalice.com.au-ssl_log 9 olympic/olympicfencing.com.au-ssl_log 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 400 34.126.141.132 132 20.151.225.230 130 132.196.61.152 96 34.76.59.85 52 35.230.112.185 51 52.139.47.57 24 203.54.180.238 20 172.202.39.151 15 139.28.219.70 4 149.104.49.26 3 118.127.40.55 2 188.165.125.250 2 114.119.159.70 1 66.249.73.171 1 52.167.144.213 --- top request paths across all vhosts (last 3 min) --- 27 GET /fetch 24 GET /heartbeat.php 8 GET /proxy 8 GET / 6 GET /admin.php 5 GET /edit.php 4 GET /store/customwarriors-kids/ 4 GET /index/function.php 4 GET /@fs/proc/self/environ 4 GET /adminfuns.php 3 POST /wp-cron.php 3 POST /v1/graphql 3 POST /graphql 3 POST /api/graphql 3 GET /wp.php 3 GET /wp-admin/js/widgets/ 3 GET /read 3 GET /rclone.conf 3 GET /lite.php 3 GET /ioxi-o.php --- busiest 3 vhosts: top paths + last 10 requests --- == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 27 GET /fetch 8 GET /proxy 3 GET /read 3 GET /ioxi-o.php 3 GET /info.php 3 GET /@fs/proc/self/environ 3 GET /download 3 GET /debug/default/view 3 GET /admin.php 3 GET /adminfuns.php 3 GET / 2 GET /wp-content/themes/admin.php -- last 10 requests -- 20.151.225.230 - - [19/Aug/2026:02:21:31 +1000] "GET /file.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:32 +1000] "GET /goods.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:32 +1000] "GET /hplfuns.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:33 +1000] "GET /htaccess.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:33 +1000] "GET /index/function.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:34 +1000] "GET /info.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:34 +1000] "GET /profile.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:35 +1000] "GET /sx.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:35 +1000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 5750 "-" "-" 20.151.225.230 - - [19/Aug/2026:02:21:36 +1000] "GET /wp-admin/images/admin.php HTTP/1.1" 404 5750 "-" "-" == candyfabcom/candyfab.com.au-ssl_log == -- top paths -- 3 GET /admin.php 2 GET /autodiscover/autodiscover.xml 1 GET /zoo2.php 1 GET /zoo1.php 1 GET /yj09.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wsomini.php 1 GET /wp-temp.php 1 GET /wp.php 1 GET /wp_motu_4r80b.php 1 GET /wp-manager.php -- last 10 requests -- 139.28.219.70 - - [19/Aug/2026:02:22:13 +1000] "GET /autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 132.196.61.152 - - [19/Aug/2026:02:22:13 +1000] "GET /wp_motu_4r80b.php HTTP/1.1" 404 5750 "-" "-" 132.196.61.152 - - [19/Aug/2026:02:22:13 +1000] "GET /8pyceeo.php HTTP/1.1" 404 5750 "-" "-" 132.196.61.152 - - [19/Aug/2026:02:22:14 +1000] "GET /.admin.php HTTP/1.1" 404 5750 "-" "-" 139.28.219.70 - - [19/Aug/2026:02:22:14 +1000] "GET /autodiscover/autodiscover.xml/2019/wp-includes/wlwmanifest.xml HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 132.196.61.152 - - [19/Aug/2026:02:22:14 +1000] "GET /wsomini.php HTTP/1.1" 404 5750 "-" "-" 132.196.61.152 - - [19/Aug/2026:02:22:15 +1000] "GET /vr.php HTTP/1.1" 404 5750 "-" "-" 139.28.219.70 - - [19/Aug/2026:02:22:15 +1000] "GET /autodiscover/autodiscover.xml/shop/wp-includes/wlwmanifest.xml HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 139.28.219.70 - - [19/Aug/2026:02:22:17 +1000] "GET /autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 139.28.219.70 - - [19/Aug/2026:02:22:18 +1000] "GET /autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C == kurri/kurrimotorinn.com.au-ssl_log == -- top paths -- 2 GET /dashboard 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /z9x8c7v6b5-debug-trigger-kurrimotorinn.com.au 1 GET /wp-json 1 GET /workspace 1 GET /web/.env 1 GET /web.config 1 GET /values.yaml 1 GET /user/login 1 GET /.streamlit/secrets.toml -- last 10 requests -- 34.76.59.85 - - [19/Aug/2026:02:20:09 +1000] "GET /api/v1/settings HTTP/1.1" 301 289 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:10 +1000] "GET /api/v2/config HTTP/1.1" 301 287 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:10 +1000] "GET /api/v1/config HTTP/1.1" 301 287 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:10 +1000] "GET /api/env HTTP/1.1" 301 281 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:10 +1000] "GET /api/v2/settings HTTP/1.1" 301 289 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:10 +1000] "GET /manifest.webmanifest HTTP/1.1" 301 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:10 +1000] "GET /api/health HTTP/1.1" 301 284 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:11 +1000] "GET /api/account HTTP/1.1" 301 285 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:11 +1000] "GET /health HTTP/1.1" 301 280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" 34.76.59.85 - - [19/Aug/2026:02:20:11 +1000] "GET /api/v1/env HTTP/1.1" 301 284 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:support@anthropic.com" --- last 30 samples (run-up to this incident) --- 2026-08-19 02:20:29 L1=1.31 run=5 blk=0 avail=6460 (55.1%) swpO=0 conn=1 myRSS=2419 php=2 phpRSS=229 ap=82 tcp=465 topuser=madalice 2026-08-19 02:20:32 L1=1.31 run=4 blk=0 avail=6046 (51.5%) swpO=105 conn=3 myRSS=2416 php=2 phpRSS=238 ap=146 tcp=40 topuser=madalice 2026-08-19 02:20:39 L1=1.19 run=1 blk=0 avail=6259 (53.4%) swpO=105 conn=1 myRSS=2416 php=0 phpRSS=0 ap=139 tcp=26 topuser=- 2026-08-19 02:20:42 L1=1.19 run=1 blk=0 avail=6264 (53.4%) swpO=0 conn=3 myRSS=2416 php=1 phpRSS=40 ap=136 tcp=26 topuser=evolution 2026-08-19 02:20:49 L1=1.00 run=2 blk=0 avail=6207 (52.9%) swpO=0 conn=1 myRSS=2416 php=1 phpRSS=147 ap=129 tcp=27 topuser=madalice 2026-08-19 02:20:52 L1=1.00 run=2 blk=0 avail=6131 (52.3%) swpO=0 conn=3 myRSS=2416 php=2 phpRSS=272 ap=126 tcp=28 topuser=madalice 2026-08-19 02:20:59 L1=0.93 run=1 blk=0 avail=6388 (54.5%) swpO=0 conn=1 myRSS=2416 php=0 phpRSS=0 ap=119 tcp=30 topuser=- 2026-08-19 02:21:02 L1=0.93 run=4 blk=0 avail=6099 (52.0%) swpO=0 conn=3 myRSS=2416 php=3 phpRSS=336 ap=116 tcp=32 topuser=madalice 2026-08-19 02:21:09 L1=1.01 run=1 blk=0 avail=6439 (54.9%) swpO=0 conn=1 myRSS=2416 php=0 phpRSS=0 ap=109 tcp=35 topuser=- 2026-08-19 02:21:12 L1=1.01 run=2 blk=0 avail=6290 (53.6%) swpO=0 conn=3 myRSS=2416 php=2 phpRSS=225 ap=106 tcp=34 topuser=madalice 2026-08-19 02:21:19 L1=1.01 run=2 blk=0 avail=6506 (55.5%) swpO=0 conn=1 myRSS=2416 php=0 phpRSS=0 ap=99 tcp=28 topuser=- 2026-08-19 02:21:22 L1=1.01 run=1 blk=0 avail=6514 (55.5%) swpO=0 conn=3 myRSS=2416 php=1 phpRSS=40 ap=96 tcp=30 topuser=evolution 2026-08-19 02:21:30 L1=0.86 run=1 blk=0 avail=6587 (56.2%) swpO=0 conn=1 myRSS=2416 php=0 phpRSS=0 ap=89 tcp=29 topuser=- 2026-08-19 02:21:32 L1=0.86 run=4 blk=0 avail=5982 (51.0%) swpO=0 conn=3 myRSS=2416 php=6 phpRSS=788 ap=86 tcp=42 topuser=evolution 2026-08-19 02:21:40 L1=1.59 run=9 blk=0 avail=5717 (48.7%) swpO=782 conn=1 myRSS=2398 php=8 phpRSS=1199 ap=79 tcp=46 topuser=evolution 2026-08-19 02:21:42 L1=1.59 run=3 blk=0 avail=6624 (56.5%) swpO=782 conn=3 myRSS=2398 php=2 phpRSS=125 ap=76 tcp=37 topuser=alison 2026-08-19 02:21:50 L1=1.57 run=4 blk=0 avail=6640 (56.6%) swpO=0 conn=1 myRSS=2398 php=2 phpRSS=156 ap=69 tcp=31 topuser=aaa 2026-08-19 02:21:52 L1=1.57 run=1 blk=0 avail=6740 (57.5%) swpO=0 conn=2 myRSS=2398 php=1 phpRSS=40 ap=66 tcp=35 topuser=evolution 2026-08-19 02:22:00 L1=1.33 run=2 blk=0 avail=6792 (57.9%) swpO=0 conn=1 myRSS=2398 php=0 phpRSS=0 ap=59 tcp=32 topuser=- 2026-08-19 02:22:02 L1=1.33 run=1 blk=0 avail=6750 (57.6%) swpO=0 conn=2 myRSS=2398 php=1 phpRSS=40 ap=56 tcp=33 topuser=evolution 2026-08-19 02:22:09 L1=1.12 run=2 blk=0 avail=6749 (57.5%) swpO=0 conn=1 myRSS=2398 php=0 phpRSS=0 ap=49 tcp=28 topuser=- 2026-08-19 02:22:12 L1=1.12 run=7 blk=0 avail=6048 (51.6%) swpO=0 conn=2 myRSS=2398 php=1 phpRSS=39 ap=46 tcp=46 topuser=evolution 2026-08-19 02:22:19 L1=1.86 run=1 blk=0 avail=6853 (58.4%) swpO=132 conn=1 myRSS=2393 php=0 phpRSS=0 ap=38 tcp=31 topuser=- 2026-08-19 02:22:22 L1=1.86 run=3 blk=0 avail=6857 (58.5%) swpO=132 conn=2 myRSS=2393 php=1 phpRSS=40 ap=36 tcp=26 topuser=evolution 2026-08-19 02:22:29 L1=1.95 run=1 blk=0 avail=6914 (58.9%) swpO=0 conn=1 myRSS=2393 php=0 phpRSS=0 ap=28 tcp=24 topuser=- 2026-08-19 02:22:32 L1=1.79 run=2 blk=0 avail=6915 (59.0%) swpO=0 conn=2 myRSS=2393 php=1 phpRSS=40 ap=26 tcp=25 topuser=evolution 2026-08-19 02:22:39 L1=1.81 run=2 blk=0 avail=6744 (57.5%) swpO=0 conn=1 myRSS=2393 php=0 phpRSS=0 ap=20 tcp=28 topuser=- 2026-08-19 02:22:42 L1=2.22 run=7 blk=0 avail=6648 (56.7%) swpO=0 conn=2 myRSS=2393 php=5 phpRSS=361 ap=19 tcp=30 topuser=speedlin 2026-08-19 02:22:49 L1=2.45 run=4 blk=0 avail=6824 (58.2%) swpO=0 conn=1 myRSS=2393 php=2 phpRSS=178 ap=17 tcp=25 topuser=speedlin 2026-08-19 02:22:52 L1=3.05 run=6 blk=14 avail=6956 (59.3%) swpO=0 conn=2 myRSS=2393 php=1 phpRSS=53 ap=17 tcp=28 topuser=speedlin