INCIDENT 2026-08-24 10:31:58 trigger: swapout=2745/s ================================================================== load: 2.42 2.37 2.22 3/754 3451547 ncpu:10 mem_avail: 5100MB/11729MB (43.5%) swap_used:3624MB swapout:2745/s blocked(D):0 running:4 iowait:5.1% steal:0.0% php: 3 procs / 462MB heaviest user: madalice (3 procs, 462MB) apache: 144 procs tcp_estab: 45 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2948 nobody 143 2411 root 242 1021 madalice 3 468 netdata 8 259 mailman 20 93 cpanellogin 1 63 kurri 3 35 mailnull 2 32 evolution 8 26 dovenull 6 26 wp-toolkit 5 18 zabbix 1 15 alison 1 12 named 1 11 dovecot 3 7 nscd 1 6 cpanelconnecttrack 1 3 dbus 1 2 polkitd 1 1 --- php workers by user --- USER PROCS RSS_MB madalice 3 470 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3653 MB Active(file): 2095 MB Inactive(file): 1310 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 411 MB CommitLimit: 9960 MB Committed_AS: 9584 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3032611 root 09:20:41 3964 /usr/bin/imunify-agent-proxy 3446110 root 05:15 58608 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 3018888 9.5 Ssl 9-02:41:24 /usr/sbin/mariadbd 3451487 3447565 madalice 273632 75.3 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 209596 2.5 Ssl 56-00:22:06 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2575382 1 root 192400 0.0 Ss 9-02:41:27 /usr/lib/systemd/systemd-journald 3080743 3075441 root 165612 0.1 S 07:59:21 spamd child 3080744 3075441 root 147932 0.0 S 07:59:21 spamd child 3075441 1 root 121152 0.0 Ss 08:09:00 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3451509 3451354 madalice 111164 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3451515 3451347 madalice 105116 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3418681 1353308 cpanellogin 65180 0.1 S 33:06 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3446110 1 root 58608 0.4 Ssl 05:15 /opt/imunify360/venv/bin/python3 -m imav.run 2223 1201 root 45172 0.0 Sl 56-00:22:05 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42064 0.0 Ss 33-07:50:36 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 31380 0.1 Sl 56-00:22:01 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 26884 0.1 Ss 56-00:22:05 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3451510 1 root 24304 0.0 Ss 00:00 /usr/sbin/exim -Mc 1wyIbV-0000000ETtS-2vxp 3074682 1 root 23212 0.0 Ss 08:09:34 lfd - sleeping 1463 1 root 22688 0.0 Ss 56-00:22:05 tailwatchd 3443472 1276780 nobody 22392 0.0 S 07:54 /usr/sbin/httpd -k start 3446822 1276780 nobody 22020 0.0 S 04:33 /usr/sbin/httpd -k start 3447553 1276780 nobody 21832 0.0 S 03:39 /usr/sbin/httpd -k start 3447920 1276780 nobody 21656 0.0 S 03:12 /usr/sbin/httpd -k start 3448607 1276780 nobody 21592 0.0 S 02:37 /usr/sbin/httpd -k start 3447565 1276780 nobody 21404 0.0 S 03:38 /usr/sbin/httpd -k start 3448609 1276780 nobody 21324 0.0 S 02:37 /usr/sbin/httpd -k start 3448608 1276780 nobody 20616 0.0 S 02:37 /usr/sbin/httpd -k start 3447581 1276780 nobody 20556 0.0 S 03:37 /usr/sbin/httpd -k start 3447754 1276780 nobody 20548 0.0 S 03:22 /usr/sbin/httpd -k start 3449776 1276780 nobody 20504 0.0 S 01:35 /usr/sbin/httpd -k start 3449795 1276780 nobody 20496 0.0 S 01:34 /usr/sbin/httpd -k start 3450419 1276780 nobody 20280 0.0 S 00:58 /usr/sbin/httpd -k start 3449798 1276780 nobody 20096 0.0 S 01:34 /usr/sbin/httpd -k start 3449794 1276780 nobody 20028 0.0 S 01:34 /usr/sbin/httpd -k start 3449976 1276780 nobody 20000 0.0 S 01:23 /usr/sbin/httpd -k start 3450014 1276780 nobody 19904 0.0 S 01:21 /usr/sbin/httpd -k start 3450535 1276780 nobody 19904 0.0 S 00:54 /usr/sbin/httpd -k start 3448768 1276780 nobody 19748 0.0 S 02:27 /usr/sbin/httpd -k start 3450531 1276780 nobody 19700 0.0 S 00:54 /usr/sbin/httpd -k start 3448930 1276780 nobody 19616 0.1 S 02:15 /usr/sbin/httpd -k start 3446508 1276780 nobody 19556 0.0 S 04:56 /usr/sbin/httpd -k start 3447768 1276780 nobody 19520 0.0 S 03:21 /usr/sbin/httpd -k start 3449799 1276780 nobody 19476 0.0 S 01:34 /usr/sbin/httpd -k start 3449975 1276780 nobody 19444 0.0 S 01:23 /usr/sbin/httpd -k start 3449174 1276780 nobody 19404 0.0 S 02:01 /usr/sbin/httpd -k start 3449997 1276780 nobody 19360 0.0 S 01:22 /usr/sbin/httpd -k start 3447767 1276780 nobody 19284 0.0 S 03:21 /usr/sbin/httpd -k start 3450017 1276780 nobody 19272 0.0 S 01:21 /usr/sbin/httpd -k start 3451516 3451510 mailnull 18948 0.0 S 00:00 /usr/sbin/exim -Mc 1wyIbV-0000000ETtS-2vxp 3450474 1276780 nobody 18896 0.1 S 00:56 /usr/sbin/httpd -k start 3450075 1276780 nobody 18872 0.0 S 01:20 /usr/sbin/httpd -k start 3451289 1276780 nobody 18820 0.2 S 00:16 /usr/sbin/httpd -k start 3449998 1276780 nobody 18708 0.0 S 01:22 /usr/sbin/httpd -k start 3450524 1276780 nobody 18660 0.0 S 00:54 /usr/sbin/httpd -k start 3450063 1276780 nobody 18636 0.0 S 01:20 /usr/sbin/httpd -k start 185104 2431 netdata 18412 2.1 Sl 11-13:58:24 /usr/libexec/netdata/plugins.d/apps.plugin 1 3450523 1276780 nobody 18392 0.0 S 00:54 /usr/sbin/httpd -k start 3451251 1276780 nobody 18368 0.0 S 00:18 /usr/sbin/httpd -k start 3450061 1276780 nobody 18128 0.0 S 01:20 /usr/sbin/httpd -k start 3450074 1276780 nobody 17968 0.0 S 01:20 /usr/sbin/httpd -k start 3451349 1276780 nobody 17956 0.0 S 00:15 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 25324104 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 1093 evolution/apps.evolutionerp.com.au-ssl_log 165 evolution/release.evolutionerp.com.au 117 otterfencing/otterfencing.com.au-ssl_log 97 cosgrovecreative/cosgrovecreative.com.au-ssl_log 92 tubesupplies/tubesupplies.com.au-ssl_log 64 alison/alisonarts.com.au-ssl_log 46 evolution/portal.evolutionerp.com.au-ssl_log 33 madalice/madalice.com.au-ssl_log 30 whiz/whizengineering.com.au-ssl_log 10 evolution/evolutionerp.com.au-ssl_log 3 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 478 203.54.180.238 231 20.220.10.235 230 103.104.165.99 165 34.59.210.119 97 4.232.148.111 92 74.248.96.44 70 165.225.233.109 62 20.52.41.200 62 150.228.163.253 45 180.181.236.49 43 20.151.129.194 33 182.239.240.254 19 120.21.210.31 17 110.174.119.207 16 147.161.215.89 --- top request paths across all vhosts (last 3 min) --- 293 POST /functions.php 209 GET /app/ajax.php 92 GET /index.php 63 POST /plugins/csvexporter/plugin.php 40 POST /app/ajax/selectFilter.php 37 POST /clienteditsave.php 36 POST /quoteditsave.php 36 POST /app/ajax/selectFilterSingle.php 32 POST /app/ajax.php 31 POST /jobeditsave.php 25 GET /heartbeat.php 18 POST /logsave.php 18 POST /itemModify.php 11 POST //functions.php 10 HEAD /index.php 9 GET / 8 POST /plugins/fencecosting/plugin.php 7 GET /plugins/fensa/fensa-ajax.php 6 POST /wp-admin/admin-ajax.php 6 POST /tasksave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 293 POST /functions.php 209 GET /app/ajax.php 89 GET /index.php 63 POST /plugins/csvexporter/plugin.php 40 POST /app/ajax/selectFilter.php 37 POST /clienteditsave.php 36 POST /quoteditsave.php 36 POST /app/ajax/selectFilterSingle.php 32 POST /app/ajax.php 31 POST /jobeditsave.php 18 POST /logsave.php 18 POST /itemModify.php -- last 10 requests -- 103.104.165.99 - - [24/Aug/2026:10:31:54 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21115 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36854" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [24/Aug/2026:10:31:54 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfshoporderdetail%26id%3D43649&call=getUserSetting&caller=ajaxSubmitLocal&seq=12931934184 HTTP/1.1" 200 106 "https://my.evolutio 52.167.144.213 - - [24/Aug/2026:10:31:55 +1000] "GET /index.php?page=activities&keyword=patricia+nugent%2C+retired+nurse%2C+age+78%2Cboston%2Cma HTTP/1.1" 200 5306 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; 165.225.233.109 - - [24/Aug/2026:10:31:54 +1000] "GET /index.php?page=jobedit&id=14147 HTTP/1.1" 200 108091 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 203.54.180.238 - - [24/Aug/2026:10:31:55 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43649" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; 203.54.180.238 - - [24/Aug/2026:10:31:55 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities&date=24-08-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [24/Aug/2026:10:31:55 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36854" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 165.225.233.109 - - [24/Aug/2026:10:31:55 +1000] "POST /logsave.php?call=getHistory&id=14147&module=job HTTP/1.1" 200 150 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=14147" "Mozilla/5.0 (Windows NT 10.0; Wi 165.225.233.109 - - [24/Aug/2026:10:31:56 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18376922358 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 165.225.233.109 - - [24/Aug/2026:10:31:56 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=15309717479 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind == evolution/apps.evolutionerp.com.au-ssl_log == -- top paths -- 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /.zshrc 1 GET /z9x8c7v6b5-debug-trigger-apps.evolutionerp.com.au 1 GET /wp-json 1 GET /wp-config.php.old 1 GET /wp-config.php.bak 1 GET /web/.env 1 GET /web.config 1 GET /values.yaml 1 GET /v1/graphql -- last 10 requests -- 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /nginx_status HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /app_dev.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /wp-json HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /info.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /__debug__/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /app_dev.php/_profiler HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /pi.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /api/graphql HTTP/1.1" 200 43 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /graphql/console HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.59.210.119 - - [24/Aug/2026:10:29:25 +1000] "GET /graphql HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" == evolution/release.evolutionerp.com.au == -- top paths -- 1 GET /zoo2.php 1 GET /z43agz.php 1 GET /yawa.php 1 GET /xwpg.php 1 GET /x1da.php 1 GET /ws77.php 1 GET /wpxml.php 1 GET /wp-rrtx.php 1 GET /wp-includes/Text/Diff/Engine/file_ed27.php 1 GET /wp-includes/Text/Diff/Engine/file_cdd9.php 1 GET /wp-fure.php 1 GET /wp-css.php -- last 10 requests -- 20.220.10.235 - - [24/Aug/2026:10:29:46 +1000] "GET /ty.php HTTP/1.1" 301 285 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:47 +1000] "GET /ot.php HTTP/1.1" 301 285 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:47 +1000] "GET /epinyins.php HTTP/1.1" 301 291 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:48 +1000] "GET /wp-admin/css/index.php HTTP/1.1" 301 301 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:48 +1000] "GET /png.php HTTP/1.1" 301 286 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:49 +1000] "GET /crgio.php HTTP/1.1" 301 288 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:49 +1000] "GET /red.php HTTP/1.1" 301 286 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:49 +1000] "GET /1xmomo.php HTTP/1.1" 301 289 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:50 +1000] "GET /82.php HTTP/1.1" 301 285 "-" "-" 20.220.10.235 - - [24/Aug/2026:10:29:50 +1000] "GET /talkxkej.php HTTP/1.1" 301 291 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-24 10:29:37 L1=2.41 run=4 blk=0 avail=5901 (50.3%) swpO=0 conn=2 myRSS=3045 php=2 phpRSS=83 ap=51 tcp=49 topuser=evolution 2026-08-24 10:29:38 L1=2.41 run=5 blk=0 avail=5812 (49.6%) swpO=0 conn=2 myRSS=3045 php=6 phpRSS=320 ap=51 tcp=49 topuser=evolution 2026-08-24 10:29:47 L1=2.35 run=7 blk=0 avail=5806 (49.5%) swpO=0 conn=2 myRSS=3045 php=4 phpRSS=241 ap=53 tcp=57 topuser=evolution 2026-08-24 10:29:48 L1=2.35 run=4 blk=0 avail=5841 (49.8%) swpO=0 conn=2 myRSS=3045 php=3 phpRSS=178 ap=53 tcp=57 topuser=evolution 2026-08-24 10:29:57 L1=2.39 run=3 blk=0 avail=5853 (49.9%) swpO=0 conn=2 myRSS=3045 php=1 phpRSS=66 ap=54 tcp=55 topuser=evolution 2026-08-24 10:29:58 L1=2.39 run=2 blk=0 avail=5859 (50.0%) swpO=0 conn=2 myRSS=3045 php=1 phpRSS=66 ap=58 tcp=57 topuser=evolution 2026-08-24 10:30:07 L1=2.32 run=3 blk=0 avail=5797 (49.4%) swpO=0 conn=2 myRSS=3045 php=3 phpRSS=244 ap=50 tcp=39 topuser=evolution 2026-08-24 10:30:08 L1=2.32 run=3 blk=0 avail=5885 (50.2%) swpO=0 conn=2 myRSS=3045 php=2 phpRSS=134 ap=49 tcp=38 topuser=evolution 2026-08-24 10:30:17 L1=2.42 run=5 blk=0 avail=5660 (48.3%) swpO=0 conn=2 myRSS=3045 php=4 phpRSS=469 ap=41 tcp=50 topuser=madalice 2026-08-24 10:30:18 L1=2.42 run=8 blk=0 avail=5745 (49.0%) swpO=0 conn=5 myRSS=3045 php=4 phpRSS=376 ap=42 tcp=47 topuser=madalice 2026-08-24 10:30:27 L1=2.49 run=1 blk=0 avail=5853 (49.9%) swpO=2 conn=2 myRSS=3045 php=2 phpRSS=87 ap=57 tcp=55 topuser=evolution 2026-08-24 10:30:28 L1=2.49 run=3 blk=0 avail=5857 (49.9%) swpO=2 conn=5 myRSS=3045 php=2 phpRSS=108 ap=57 tcp=56 topuser=evolution 2026-08-24 10:30:37 L1=2.49 run=3 blk=0 avail=5705 (48.6%) swpO=0 conn=3 myRSS=3045 php=2 phpRSS=196 ap=66 tcp=86 topuser=evolution 2026-08-24 10:30:38 L1=2.49 run=3 blk=0 avail=5504 (46.9%) swpO=0 conn=5 myRSS=3045 php=2 phpRSS=282 ap=82 tcp=79 topuser=evolution 2026-08-24 10:30:47 L1=2.58 run=1 blk=1 avail=5780 (49.3%) swpO=0 conn=3 myRSS=3047 php=0 phpRSS=0 ap=74 tcp=61 topuser=- 2026-08-24 10:30:48 L1=2.58 run=2 blk=0 avail=5791 (49.4%) swpO=0 conn=5 myRSS=3047 php=0 phpRSS=0 ap=73 tcp=58 topuser=- 2026-08-24 10:30:57 L1=2.33 run=3 blk=0 avail=5388 (45.9%) swpO=0 conn=3 myRSS=3047 php=3 phpRSS=560 ap=64 tcp=59 topuser=corpkicks 2026-08-24 10:30:58 L1=2.33 run=3 blk=0 avail=5155 (44.0%) swpO=0 conn=5 myRSS=3047 php=4 phpRSS=829 ap=63 tcp=58 topuser=corpkicks 2026-08-24 10:31:07 L1=2.43 run=1 blk=0 avail=5663 (48.3%) swpO=0 conn=3 myRSS=3047 php=0 phpRSS=0 ap=89 tcp=57 topuser=- 2026-08-24 10:31:08 L1=2.43 run=1 blk=0 avail=5665 (48.3%) swpO=0 conn=5 myRSS=3047 php=0 phpRSS=0 ap=89 tcp=48 topuser=- 2026-08-24 10:31:18 L1=2.29 run=3 blk=0 avail=5525 (47.1%) swpO=0 conn=3 myRSS=3047 php=6 phpRSS=382 ap=79 tcp=66 topuser=tubesupplies 2026-08-24 10:31:18 L1=2.29 run=5 blk=0 avail=5542 (47.3%) swpO=0 conn=2 myRSS=3047 php=2 phpRSS=243 ap=79 tcp=65 topuser=tubesupplies 2026-08-24 10:31:28 L1=2.09 run=2 blk=0 avail=5647 (48.1%) swpO=2 conn=3 myRSS=3047 php=1 phpRSS=197 ap=69 tcp=49 topuser=madalice 2026-08-24 10:31:28 L1=2.09 run=2 blk=0 avail=5545 (47.3%) swpO=2 conn=2 myRSS=3047 php=3 phpRSS=358 ap=69 tcp=52 topuser=madalice 2026-08-24 10:31:38 L1=2.14 run=2 blk=0 avail=5694 (48.5%) swpO=2 conn=2 myRSS=3047 php=1 phpRSS=195 ap=63 tcp=179 topuser=madalice 2026-08-24 10:31:38 L1=2.14 run=1 blk=0 avail=5858 (49.9%) swpO=2 conn=2 myRSS=3047 php=0 phpRSS=0 ap=63 tcp=177 topuser=- 2026-08-24 10:31:48 L1=1.97 run=17 blk=0 avail=4754 (40.5%) swpO=856 conn=2 myRSS=3019 php=13 phpRSS=896 ap=153 tcp=172 topuser=madalice 2026-08-24 10:31:48 L1=1.97 run=19 blk=1 avail=4429 (37.8%) swpO=1968 conn=2 myRSS=2987 php=15 phpRSS=1365 ap=153 tcp=138 topuser=madalice 2026-08-24 10:31:58 L1=2.42 run=4 blk=0 avail=5100 (43.5%) swpO=2745 conn=4 myRSS=2948 php=3 phpRSS=462 ap=144 tcp=45 topuser=madalice 2026-08-24 10:31:58 L1=2.42 run=6 blk=0 avail=5236 (44.6%) swpO=1632 conn=2 myRSS=2948 php=3 phpRSS=327 ap=144 tcp=40 topuser=madalice