INCIDENT 2026-08-21 22:17:37 trigger: swapout=2846/s ================================================================== load: 2.40 1.79 1.38 5/637 1190867 ncpu:10 mem_avail: 4173MB/11729MB (35.6%) swap_used:3613MB swapout:2846/s blocked(D):1 running:4 iowait:2.8% steal:0.0% php: 3 procs / 107MB heaviest user: alison (1 procs, 67MB) apache: 19 procs tcp_estab: 23 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 3 2655 mysql 1 2560 root 245 746 nobody 19 287 netdata 8 233 mailman 20 94 alison 2 82 cpanellogin 1 77 evolution 9 68 dovenull 6 25 kurri 2 22 wp-toolkit 6 17 zabbix 1 14 aaa 1 12 named 1 10 mailnull 2 10 nscd 1 7 dovecot 3 7 cpanelconnecttrack 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB alison 1 71 evolution 1 40 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4028 MB Active(file): 1112 MB Inactive(file): 2850 MB Dirty: 373 MB Writeback: 15 MB SReclaimable: 403 MB CommitLimit: 9960 MB Committed_AS: 9518 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 267385 root 21:06:21 2280 /usr/bin/imunify-agent-proxy 1164866 root 17:37 1228 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 1186547 root 04:50 59768 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1190660 1190659 madalice 2703564 97.6 RNs 00:15 /usr/local/cpanel/3rdparty/bin/analog +CIMAGEDIR /images/ +CDOMAINSFILE /usr/local/cpanel/3rdparty/share/analog/usdom.tab +CCHARTDIR ./ 2575700 1 mysql 2621548 11.4 Ssl 6-14:27:02 /usr/sbin/mariadbd 319521 311538 root 180192 0.0 S 19:39:53 spamd child 1220 1 netdata 179364 2.5 Ssl 53-12:07:44 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 853881 311538 root 90488 0.0 S 08:26:48 spamd child 311538 1 root 90464 0.0 Ss 19:54:52 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1147543 1353308 cpanellogin 79496 0.0 S 45:07 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 1190834 1170645 alison 78800 43.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1186547 1 root 59768 2.0 Ssl 04:50 /opt/imunify360/venv/bin/python3 -m imav.run 1190835 1167198 evolution 41012 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 40740 0.0 Sl 53-12:07:43 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 39800 0.0 Ss 30-19:36:14 cpsrvd (SSL) - waiting for connections 2575382 1 root 37780 0.0 Ss 6-14:27:05 /usr/lib/systemd/systemd-journald 4922 2431 netdata 35792 0.1 Sl 53-12:07:39 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 26080 0.1 Ss 53-12:07:43 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1187749 1276780 nobody 22140 0.2 S 03:23 /usr/sbin/httpd -k start 1187642 1276780 nobody 20648 0.0 S 03:30 /usr/sbin/httpd -k start 310731 1 root 20468 0.0 Ss 19:55:24 lfd - sleeping 1187000 1276780 nobody 19324 0.0 S 04:16 /usr/sbin/httpd -k start 1189554 1276780 nobody 19240 0.0 S 01:26 /usr/sbin/httpd -k start 1167198 1276780 nobody 18928 0.0 S 14:12 /usr/sbin/httpd -k start 1189875 1276780 nobody 18132 0.0 S 01:00 /usr/sbin/httpd -k start 1463 1 root 17956 0.0 Ss 53-12:07:43 tailwatchd 1186998 1276780 nobody 17552 0.1 S 04:16 /usr/sbin/httpd -k start 185104 2431 netdata 17516 2.1 Sl 9-01:44:02 /usr/libexec/netdata/plugins.d/apps.plugin 1 1170645 1276780 nobody 17500 0.0 S 08:29 /usr/sbin/httpd -k start 1170654 1276780 nobody 17264 0.1 S 08:28 /usr/sbin/httpd -k start 1186959 1276780 nobody 17204 0.1 S 04:18 /usr/sbin/httpd -k start 1186986 1276780 nobody 16808 0.0 S 04:17 /usr/sbin/httpd -k start 1190613 1276780 nobody 16584 0.0 S 00:18 /usr/sbin/httpd -k start 1186577 2111368 root 16244 0.6 SN 04:48 cpanellogd - waiting for child to process logs for madalice 1204 1 zabbix 15336 0.2 Ssl 53-12:07:44 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1190651 1186577 madalice 15244 0.0 SN 00:16 cpanellogd - http logs for madalice 1186904 1276780 nobody 15216 0.0 S 04:26 /usr/sbin/httpd -k start 1170659 1276780 nobody 14380 0.1 S 08:28 /usr/sbin/httpd -k start 1170655 1276780 nobody 14224 0.0 S 08:28 /usr/sbin/httpd -k start 1186958 1276780 nobody 14060 0.0 S 04:18 /usr/sbin/httpd -k start 1187181 3828812 aaa 12532 0.0 S 03:56 dovecot/imap 1154829 3828812 kurri 12500 0.0 S 32:37 dovecot/imap 1169541 3828812 alison 12120 0.0 S 10:15 dovecot/imap 1276780 1 root 11656 0.0 Ss 16-06:46:19 /usr/sbin/httpd -k start 405204 1471 root 11600 0.0 S 17:06:27 cPhulkd - dbprocessor 3668761 3828812 kurri 10828 0.0 S 1-12:03:23 dovecot/imap 1471 1 root 10728 0.0 Ss 53-12:07:43 cPhulkd - processor 2107664 1 named 10708 0.0 Ssl 2-19:54:58 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 2107879 1 root 8964 0.0 Ss 2-19:54:57 queueprocd - waiting up to 60s to process a task 918817 27524 root 8880 0.0 Ss 07:03:40 sshd: evolution [priv] 1059098 3828812 dovenull 8052 0.0 S 8-06:44:49 dovecot/imap-login 1466 1 root 7536 0.0 Ss 53-12:07:43 dnsadmin - dormant mode 1059102 3828812 dovenull 7392 0.0 S 8-06:44:49 dovecot/imap-login 2111078 1 nscd 7252 0.0 Ssl 2-19:54:47 /usr/sbin/nscd 4028163 27524 root 6596 0.0 Ss 1-06:58:01 sshd: evolution [priv] 4161699 27524 root 6316 0.0 Ss 1-04:29:57 sshd: evolution [priv] 1 0 root 6140 0.2 Ss 53-12:07:52 /usr/lib/systemd/systemd --switched-root --system --deserialize 17 4028165 27524 root 6072 0.0 Ss 1-06:58:01 sshd: root [priv] 906072 1 evolution 5744 0.0 Ss 3-22:21:04 /usr/lib/systemd/systemd --user 1059104 3828812 dovenull 5592 0.0 S 8-06:44:49 dovecot/pop3-login 1059100 3828812 dovenull 5548 0.0 S 8-06:44:49 dovecot/pop3-login 728860 2431 netdata 5428 0.0 Sl 11:04:06 /usr/libexec/netdata/plugins.d/debugfs.plugin 1 2111825 2111790 mailman 5408 0.0 S 2-19:54:35 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 22972646 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min aaa/aaadownunder.com.au-ssl_log 74 alison/alisonarts.com.au-ssl_log 60 evolution/support.evolutionerp.com.au 45 vinesit/vinesit.com.au-ssl_log 34 evolution/portal.evolutionerp.com.au-ssl_log 23 olytis/tis.com.au-ssl_log 14 alison/alisonarts.com.au 7 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 71 91.92.42.71 67 74.7.227.151 45 20.104.49.167 30 172.182.200.96 19 203.54.180.238 14 20.203.138.185 4 96.126.130.210 3 93.152.221.226 3 118.127.40.55 1 3.219.81.66 --- top request paths across all vhosts (last 3 min) --- 71 POST /wp-login.php 30 GET /autodiscover/autodiscover.xml 19 GET /heartbeat.php 3 POST /wp-cron.php 3 GET /ops.php 3 GET / 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /this_is_a_new_hello_world.php 2 GET /gallery/rescue-helmets/ 2 GET /gallery/mining-conference-2018-helmets/ 2 GET /gallery/miners-legacy-hard-hats/ 2 GET /gallery/hvmr-peabody-hardhats/ 2 GET /gallery/captain-america-wheel/ 2 GET /gallery/captain-america-shield/ 2 GET /.env.txt 2 GET /.env 2 GET /album/hard-hats/ 1 GET /wpxml.php 1 GET /wp-includes/wp-class.php 1 GET /wp-includes/l10n/themes.php --- busiest 3 vhosts: top paths + last 10 requests --- == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 71 POST /wp-login.php 2 POST /wp-cron.php 1 GET /index.php/2019/06/04/underpinning-a-5year-old-house/ -- last 10 requests -- 91.92.42.71 - - [21/Aug/2026:22:16:59 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:01 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:03 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:04 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:06 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:07 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:10 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:11 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:13 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 91.92.42.71 - - [21/Aug/2026:22:17:14 +1000] "POST /wp-login.php HTTP/1.1" 200 7299 "https://aaimage.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" == alison/alisonarts.com.au-ssl_log == -- top paths -- 1 GET /tag/triumph/ 1 GET /tag/silver/ 1 GET /tag/painted/page/2/ 1 GET /tag/painted/ 1 GET /tag/mining/ 1 GET /tag/metallic/ 1 GET /tag/keepsake/ 1 GET /tag/kangaroo/ 1 GET /tag/holden/ 1 GET /tag/hero/ 1 GET /tag/helmet/page/2/ 1 GET /tag/helmet/ -- last 10 requests -- 74.7.227.151 - - [21/Aug/2026:22:17:13 +1000] "GET /category/work/page/6/ HTTP/1.1" 200 10524 "https://alisonarts.com.au/category/work/page/5/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; 74.7.227.151 - - [21/Aug/2026:22:17:15 +1000] "GET /tag/hard-hat/ HTTP/1.1" 200 10291 "https://alisonarts.com.au/tag/helmet/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.co 74.7.227.151 - - [21/Aug/2026:22:17:16 +1000] "GET /tag/painted/page/2/ HTTP/1.1" 200 11484 "https://alisonarts.com.au/tag/painted/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://op 74.7.227.151 - - [21/Aug/2026:22:17:18 +1000] "GET /tag/hardhat/ HTTP/1.1" 200 10767 "https://alisonarts.com.au/tag/helmet/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com 74.7.227.151 - - [21/Aug/2026:22:17:19 +1000] "GET /tag/custom/page/3/ HTTP/1.1" 200 11363 "https://alisonarts.com.au/tag/custom/page/2/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https 74.7.227.151 - - [21/Aug/2026:22:17:21 +1000] "GET /category/work/custom-airbrush-painted-hard-hats/page/10/ HTTP/1.1" 200 10353 "https://alisonarts.com.au/category/work/custom-airbrush-painted-hard-hats/page/9/" "Mozill 74.7.227.151 - - [21/Aug/2026:22:17:23 +1000] "GET /tag/silver/ HTTP/1.1" 200 10202 "https://alisonarts.com.au/tag/custom/page/2/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://open 74.7.227.151 - - [21/Aug/2026:22:17:24 +1000] "GET /tag/artwork/ HTTP/1.1" 200 10357 "https://alisonarts.com.au/tag/helmet/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com 74.7.227.151 - - [21/Aug/2026:22:17:26 +1000] "GET /tag/keepsake/ HTTP/1.1" 200 10359 "https://alisonarts.com.au/tag/helmet/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.co 74.7.227.151 - - [21/Aug/2026:22:17:27 +1000] "GET /tag/triumph/ HTTP/1.1" 200 10200 "https://alisonarts.com.au/tag/custom/page/2/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://ope == evolution/support.evolutionerp.com.au == -- top paths -- 1 GET /wpxml.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /this_is_a_new_hello_world.php 1 GET /she11.php 1 GET /sf.php 1 GET /samll.php 1 GET /reinacti.php 1 GET /pyrethrumize.php 1 GET /pk.php 1 GET /ops.php 1 GET /nox.php 1 GET /new4.php -- last 10 requests -- 20.104.49.167 - - [21/Aug/2026:22:16:55 +1000] "GET /samll.php HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:55 +1000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:56 +1000] "GET /she11.php HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:56 +1000] "GET /kerang.php HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:56 +1000] "GET /hg.php?p= HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:56 +1000] "GET /m.php?p= HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:57 +1000] "GET /baopkpan.php HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:57 +1000] "GET /fling.php?p= HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:57 +1000] "GET /new2.php HTTP/1.1" 404 - "-" "-" 20.104.49.167 - - [21/Aug/2026:22:16:58 +1000] "GET /new4.php HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-21 22:15:08 L1=2.25 run=6 blk=0 avail=3695 (31.5%) swpO=4928 conn=4 myRSS=2732 php=4 phpRSS=320 ap=17 tcp=22 topuser=alison 2026-08-21 22:15:17 L1=2.44 run=5 blk=1 avail=3455 (29.5%) swpO=4447 conn=4 myRSS=2640 php=3 phpRSS=344 ap=17 tcp=23 topuser=corpkicks 2026-08-21 22:15:18 L1=2.44 run=2 blk=0 avail=3655 (31.2%) swpO=4217 conn=3 myRSS=2640 php=2 phpRSS=109 ap=17 tcp=26 topuser=evolution 2026-08-21 22:15:27 L1=2.83 run=4 blk=0 avail=6492 (55.4%) swpO=151 conn=4 myRSS=2637 php=2 phpRSS=211 ap=16 tcp=24 topuser=alison 2026-08-21 22:15:28 L1=2.83 run=4 blk=0 avail=6237 (53.2%) swpO=152 conn=3 myRSS=2637 php=2 phpRSS=145 ap=16 tcp=24 topuser=alison 2026-08-21 22:15:37 L1=2.70 run=4 blk=0 avail=6724 (57.3%) swpO=1 conn=4 myRSS=2637 php=3 phpRSS=171 ap=16 tcp=25 topuser=aaa 2026-08-21 22:15:38 L1=2.70 run=4 blk=0 avail=6331 (54.0%) swpO=0 conn=3 myRSS=2637 php=2 phpRSS=193 ap=16 tcp=26 topuser=alison 2026-08-21 22:15:47 L1=2.91 run=4 blk=0 avail=5433 (46.3%) swpO=0 conn=1 myRSS=2637 php=1 phpRSS=142 ap=16 tcp=21 topuser=alison 2026-08-21 22:15:48 L1=2.91 run=2 blk=0 avail=5483 (46.7%) swpO=0 conn=3 myRSS=2637 php=1 phpRSS=39 ap=16 tcp=23 topuser=evolution 2026-08-21 22:15:57 L1=2.77 run=3 blk=0 avail=6162 (52.5%) swpO=0 conn=1 myRSS=2637 php=1 phpRSS=52 ap=16 tcp=21 topuser=aaa 2026-08-21 22:15:58 L1=2.77 run=5 blk=0 avail=6100 (52.0%) swpO=0 conn=3 myRSS=2637 php=2 phpRSS=78 ap=16 tcp=20 topuser=evolution 2026-08-21 22:16:07 L1=2.65 run=6 blk=0 avail=6479 (55.2%) swpO=0 conn=1 myRSS=2637 php=4 phpRSS=463 ap=16 tcp=24 topuser=customc 2026-08-21 22:16:08 L1=2.65 run=4 blk=0 avail=6540 (55.8%) swpO=0 conn=4 myRSS=2637 php=4 phpRSS=263 ap=16 tcp=23 topuser=customc 2026-08-21 22:16:17 L1=2.62 run=3 blk=0 avail=6820 (58.1%) swpO=0 conn=1 myRSS=2637 php=1 phpRSS=46 ap=17 tcp=21 topuser=aaa 2026-08-21 22:16:18 L1=2.62 run=3 blk=0 avail=6824 (58.2%) swpO=0 conn=4 myRSS=2637 php=2 phpRSS=76 ap=17 tcp=24 topuser=evolution 2026-08-21 22:16:27 L1=2.37 run=1 blk=0 avail=6833 (58.3%) swpO=0 conn=1 myRSS=2637 php=0 phpRSS=0 ap=17 tcp=23 topuser=- 2026-08-21 22:16:28 L1=2.37 run=5 blk=0 avail=6705 (57.2%) swpO=0 conn=4 myRSS=2637 php=3 phpRSS=219 ap=17 tcp=24 topuser=madalice 2026-08-21 22:16:37 L1=2.24 run=6 blk=0 avail=6756 (57.6%) swpO=0 conn=1 myRSS=2637 php=2 phpRSS=134 ap=17 tcp=23 topuser=alison 2026-08-21 22:16:38 L1=2.24 run=4 blk=0 avail=6812 (58.1%) swpO=0 conn=4 myRSS=2637 php=1 phpRSS=46 ap=18 tcp=24 topuser=aaa 2026-08-21 22:16:47 L1=2.05 run=3 blk=0 avail=6748 (57.5%) swpO=0 conn=3 myRSS=2637 php=2 phpRSS=138 ap=18 tcp=22 topuser=aaa 2026-08-21 22:16:48 L1=2.05 run=1 blk=0 avail=6814 (58.1%) swpO=0 conn=4 myRSS=2637 php=1 phpRSS=39 ap=18 tcp=22 topuser=aaa 2026-08-21 22:16:57 L1=1.96 run=4 blk=1 avail=6729 (57.4%) swpO=0 conn=3 myRSS=2637 php=2 phpRSS=161 ap=18 tcp=23 topuser=alison 2026-08-21 22:16:58 L1=1.96 run=4 blk=0 avail=6731 (57.4%) swpO=0 conn=4 myRSS=2637 php=2 phpRSS=111 ap=18 tcp=25 topuser=alison 2026-08-21 22:17:07 L1=1.97 run=3 blk=0 avail=6741 (57.5%) swpO=0 conn=3 myRSS=2637 php=3 phpRSS=154 ap=18 tcp=26 topuser=alison 2026-08-21 22:17:08 L1=1.97 run=2 blk=0 avail=6804 (58.0%) swpO=0 conn=1 myRSS=2637 php=0 phpRSS=0 ap=18 tcp=25 topuser=- 2026-08-21 22:17:17 L1=1.74 run=3 blk=0 avail=6620 (56.4%) swpO=0 conn=3 myRSS=2637 php=4 phpRSS=291 ap=18 tcp=28 topuser=tubesupplies 2026-08-21 22:17:18 L1=1.74 run=4 blk=3 avail=6578 (56.1%) swpO=0 conn=1 myRSS=2637 php=3 phpRSS=295 ap=18 tcp=28 topuser=tubesupplies 2026-08-21 22:17:27 L1=2.37 run=3 blk=0 avail=5419 (46.2%) swpO=667 conn=3 myRSS=2627 php=2 phpRSS=88 ap=19 tcp=26 topuser=aaa 2026-08-21 22:17:28 L1=2.37 run=4 blk=0 avail=4900 (41.8%) swpO=1432 conn=1 myRSS=2608 php=3 phpRSS=336 ap=19 tcp=23 topuser=evolution 2026-08-21 22:17:37 L1=2.40 run=4 blk=1 avail=4173 (35.6%) swpO=2846 conn=3 myRSS=2560 php=3 phpRSS=107 ap=19 tcp=23 topuser=alison