INCIDENT 2026-08-27 08:35:12 trigger: php_rss=1714MB ================================================================== load: 1.58 1.85 1.97 20/694 882044 ncpu:10 mem_avail: 5390MB/11729MB (46.0%) swap_used:1996MB swapout:40/s blocked(D):0 running:25 iowait:0.1% steal:0.0% php: 13 procs / 1714MB heaviest user: evolution (13 procs, 1714MB) apache: 41 procs tcp_estab: 50 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2596 evolution 19 1818 root 241 891 nobody 40 699 netdata 8 255 cpanellogin 1 72 lowrange 4 56 mailman 20 54 alison 3 44 dovenull 6 43 kurri 2 21 wp-toolkit 6 19 dovecot 3 16 zabbix 1 14 corpkicks 1 14 mailnull 2 9 nscd 1 6 named 1 6 cpanelconnecttrack 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB evolution 14 1839 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4738 MB Active(file): 4108 MB Inactive(file): 821 MB Dirty: 94 MB Writeback: 3 MB SReclaimable: 404 MB CommitLimit: 9960 MB Committed_AS: 8720 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 868311 root 00:11 1252 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3565593 root 07:23:55 9168 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2362432 1 mysql 2654628 13.9 Ssl 2-05:03:56 /usr/sbin/mariadbd 1220 1 netdata 205132 2.5 Ssl 58-22:25:22 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3846466 3797563 root 191996 0.0 S 05:59:38 spamd child 881983 865007 evolution 183396 47.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881984 847176 evolution 182276 43.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881980 864453 evolution 181452 43.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881979 867938 evolution 181080 47.5 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881978 867940 evolution 176844 48.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881987 867681 evolution 176552 39.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3797563 1 root 175656 0.0 Ss 06:12:16 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 881981 877877 evolution 171692 38.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3846467 3797563 root 167764 0.0 S 05:59:38 spamd child 881985 867417 evolution 155740 35.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881982 866989 evolution 151188 35.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881977 865290 evolution 145184 32.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881986 867418 evolution 117804 24.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 881988 864873 evolution 107276 19.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4082167 1353308 cpanellogin 74324 0.0 S 04:46:12 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 881975 864872 evolution 68048 8.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 65060 0.0 Sl 58-22:25:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2575382 1 root 54272 0.0 Ss 12-00:44:43 /usr/lib/systemd/systemd-journald 1353308 1 root 40944 0.0 Ss 36-05:53:52 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 34972 0.1 Sl 58-22:25:17 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3797007 1 root 28608 0.0 Ss 06:12:50 lfd - sleeping 850272 1276780 nobody 23188 0.1 S 05:23 /usr/sbin/httpd -k start 847176 1276780 nobody 21924 0.0 S 08:13 /usr/sbin/httpd -k start 863086 1276780 nobody 21924 0.1 S 05:02 /usr/sbin/httpd -k start 864453 1276780 nobody 21552 0.0 S 04:49 /usr/sbin/httpd -k start 867396 1276780 nobody 21456 0.0 S 01:19 /usr/sbin/httpd -k start 865007 1276780 nobody 21024 0.0 S 04:11 /usr/sbin/httpd -k start 867680 1276780 nobody 20612 0.1 S 00:58 /usr/sbin/httpd -k start 864338 1276780 nobody 20428 0.0 S 05:01 /usr/sbin/httpd -k start 864873 1276780 nobody 20400 0.0 S 04:15 /usr/sbin/httpd -k start 864872 1276780 nobody 19976 0.0 S 04:15 /usr/sbin/httpd -k start 865290 1276780 nobody 19892 0.0 S 03:56 /usr/sbin/httpd -k start 867417 1276780 nobody 19724 0.0 S 01:18 /usr/sbin/httpd -k start 865815 1276780 nobody 19664 0.0 S 03:23 /usr/sbin/httpd -k start 185104 2431 netdata 19576 2.1 Sl 14-12:01:40 /usr/libexec/netdata/plugins.d/apps.plugin 1 1469 1 root 19548 0.1 Ss 58-22:25:21 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 867938 1276780 nobody 19480 0.1 S 00:36 /usr/sbin/httpd -k start 867371 1276780 nobody 19456 0.0 S 01:21 /usr/sbin/httpd -k start 867413 1276780 nobody 19240 0.0 S 01:18 /usr/sbin/httpd -k start 867415 1276780 nobody 19236 0.1 S 01:18 /usr/sbin/httpd -k start 867379 1276780 nobody 19068 0.0 S 01:20 /usr/sbin/httpd -k start 867419 1276780 nobody 19000 0.1 S 01:18 /usr/sbin/httpd -k start 865008 1276780 nobody 18976 0.0 S 04:11 /usr/sbin/httpd -k start 868271 1276780 nobody 18892 0.0 S 00:18 /usr/sbin/httpd -k start 867931 1276780 nobody 18804 0.1 S 00:37 /usr/sbin/httpd -k start 867665 1276780 nobody 18780 0.0 S 00:59 /usr/sbin/httpd -k start 867939 1276780 nobody 18348 0.0 S 00:36 /usr/sbin/httpd -k start 867393 1276780 nobody 17896 0.0 S 01:19 /usr/sbin/httpd -k start 866483 1276780 nobody 17828 0.0 S 02:25 /usr/sbin/httpd -k start 866989 1276780 nobody 17572 0.0 S 01:50 /usr/sbin/httpd -k start 1471 1 root 16860 0.0 Ss 58-22:25:21 cPhulkd - processor 867418 1276780 nobody 16812 0.0 S 01:18 /usr/sbin/httpd -k start 868191 1276780 nobody 16780 0.0 S 00:22 /usr/sbin/httpd -k start 876330 1276780 nobody 16612 0.1 S 00:06 /usr/sbin/httpd -k start 877877 1276780 nobody 16400 0.2 S 00:05 /usr/sbin/httpd -k start 254033 1471 root 16352 0.0 S 02:57:08 cPhulkd - dbprocessor 867681 1276780 nobody 16320 0.1 S 00:58 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 4014592 D - [kworker/u256:3+flush-8:0] --- mariadb processlist (non-sleeping) --- +---------+--------------------+--------------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+--------------------+--------------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9855547 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 9855495 | evolution_wp_dhuho | evolution_wp_nv3qp | Query | 0 | Waiting for table level lock | SELECT post_id, meta_key, meta_value FROM QpCIPREUS_postmeta WHERE post_id IN (1555) ORDER BY meta_id ASC | | 9855490 | evolution_wp_dhuho | evolution_wp_nv3qp | Query | 0 | Update | INSERT INTO `QpCIPREUS_postmeta` (`post_id`, `meta_key`, `meta_value`) VALUES (2008, '_et_builder_module_features_cache', 'a:2:{i:0;s:80:\"{\"gph\":0,\"divi\":\"4.27.7\",\"wp\":\"7.1\",\"tb\":{\"236\":\"2023-11-09 01:53:32\"},\"wpe\":[]}\";i:1;a:14:{s:46:\"et_pb_section_7549efe836066f7ea3e6f834f6cd8 | | 9855488 | evolution_wp_dhuho | evolution_wp_nv3qp | Query | 0 | Waiting for table level lock | SELECT post_id, meta_key, meta_value FROM QpCIPREUS_postmeta WHERE post_id IN (1002,820) ORDER BY meta_id ASC | +---------+--------------------+--------------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 517 evolution/portal.evolutionerp.com.au-ssl_log 116 vinesit/westpanel.vinesit.com.au-ssl_log 51 vinesit/westpanel.vinesit.com.au 50 vinesit/vinesit.com.au-ssl_log 42 tubesupplies/tubesupplies.com.au-ssl_log 33 madalice/madalice.com.au-ssl_log 12 otterfencing/otterfencing.com.au-ssl_log 11 corpkicks/corporatekicks.com.au-ssl_log 3 aaa/aaadownunder.com.au-ssl_log 2 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 284 203.54.180.238 119 103.104.165.99 101 68.155.159.216 96 14.1.95.251 48 103.104.164.114 41 4.204.200.136 39 182.239.240.254 25 203.220.53.174 14 180.181.236.49 9 20.251.63.238 5 147.161.215.103 4 147.161.213.71 3 118.127.40.55 2 91.92.243.243 2 3.94.156.104 --- top request paths across all vhosts (last 3 min) --- 191 POST /functions.php 105 GET /app/ajax.php 43 GET /index.php 40 GET /heartbeat.php 36 GET /factory_session_checker.php 28 POST /plugins/csvexporter/plugin.php 24 POST /app/ajax/selectFilter.php 20 POST /clienteditsave.php 19 POST /app/ajax.php 17 GET /factory_session_processed_qty.php 17 GET /factory_session_joiner.php 16 POST /app/ajax/selectFilterSingle.php 13 POST /quoteditsave.php 8 POST /itemModify.php 7 GET /quoteditsave.php 6 POST /logsave.php 5 POST /invoiceaddsave.php 5 GET //app/ajax.php 4 POST /jobeditsave.php 4 GET /about.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 191 POST /functions.php 105 GET /app/ajax.php 39 GET /index.php 28 POST /plugins/csvexporter/plugin.php 24 POST /app/ajax/selectFilter.php 20 POST /clienteditsave.php 19 POST /app/ajax.php 16 POST /app/ajax/selectFilterSingle.php 13 POST /quoteditsave.php 8 POST /itemModify.php 7 GET /quoteditsave.php 6 POST /logsave.php -- last 10 requests -- 103.104.165.99 - - [27/Aug/2026:08:35:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 14.1.95.251 - - [27/Aug/2026:08:35:05 +1000] "GET /app/ajax.php?cn=advBOM%&call=clearUserSetting&uri=page%3Dquotedit%26quoteid%3D2299%26sectionid%3D506 HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quot 180.181.236.49 - - [27/Aug/2026:08:35:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory&date=20-08-2026&=1787666400&=1&=1&=on" "Mozilla/5.0 (W 14.1.95.251 - - [27/Aug/2026:08:35:05 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D2299&call=getUserSetting&caller=ajaxSubmitLocal&seq=12188408041 HTTP/1.1" 200 162 "https://my.evolutionerp.com 14.1.95.251 - - [27/Aug/2026:08:35:05 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D2299&call=getUserSetting&caller=ajaxSubmitLocal&seq=19395782155 HTTP/1.1" 200 161 "https://my.evolutionerp.com 103.104.165.99 - - [27/Aug/2026:08:35:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 282 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [27/Aug/2026:08:35:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=3418" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 14.1.95.251 - - [27/Aug/2026:08:35:10 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=2269&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [27/Aug/2026:08:35:06 +1000] "POST /billaddsave.php?save=1 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=billadd&billid=19824" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 203.54.180.238 - - [27/Aug/2026:08:35:12 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 40 GET /heartbeat.php 36 GET /factory_session_checker.php 17 GET /factory_session_processed_qty.php 17 GET /factory_session_joiner.php 2 POST /portal/register 2 POST /factory_functions.php 2 GET /index.php -- last 10 requests -- 203.54.180.238 - - [27/Aug/2026:08:35:00 +1000] "GET /factory_session_joiner.php?id=34902 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [27/Aug/2026:08:35:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [27/Aug/2026:08:35:00 +1000] "GET /heartbeat.php?sentAt=1787783701&bytes=106,143,106,21&_=1787749000551 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [27/Aug/2026:08:35:02 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [27/Aug/2026:08:35:04 +1000] "GET /heartbeat.php?sentAt=1787783704&bytes=106,143,106,24&_=1787631314623 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [27/Aug/2026:08:35:06 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 103.104.165.99 - - [27/Aug/2026:08:35:06 +1000] "POST /factory_functions.php HTTP/1.1" 302 20 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=16362" "Mozilla/5.0 (Linux; Android 10; K) A 103.104.165.99 - - [27/Aug/2026:08:35:06 +1000] "GET /index.php?page=inventory_picking_goods&pickid=16362 HTTP/1.1" 200 13185 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=16362" "Mozi 103.104.165.99 - - [27/Aug/2026:08:35:07 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=16362" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [27/Aug/2026:08:35:07 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == vinesit/westpanel.vinesit.com.au-ssl_log == -- top paths -- 1 GET /wp-signup.php 1 GET /wp-links.php 1 GET /wp-includes/Text/autoload_classmap.php 1 GET /wp-includes/js/tinymce/plugins/compat3x/css/ 1 GET /wp-includes/ID3/index.php 1 GET /wp-includes/customize/index.php 1 GET /wp-includes/css/index.php 1 GET /wp-includes/autoload_classmap.php 1 GET /wp-content/uploads/index.php 1 GET /wp-content/uploads/2022/10/upload.php 1 GET /wp-content/plugins/xt/ 1 GET /wp-content/plugins/xt -- last 10 requests -- 68.155.159.216 - - [27/Aug/2026:08:34:18 +1000] "GET /mar.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:19 +1000] "GET /system.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:21 +1000] "GET /mah.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:23 +1000] "GET /wp-includes/ID3/index.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:25 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:27 +1000] "GET /doc.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:28 +1000] "GET /backup.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:30 +1000] "GET /default.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:32 +1000] "GET /wp-admin/maint/about.php HTTP/1.1" 500 718 "-" "-" 68.155.159.216 - - [27/Aug/2026:08:34:34 +1000] "GET /wp-content/uploads/2022/10/upload.php HTTP/1.1" 403 12 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-27 08:32:51 L1=1.34 run=1 blk=0 avail=6664 (56.8%) swpO=0 conn=2 myRSS=2598 php=1 phpRSS=40 ap=37 tcp=33 topuser=evolution 2026-08-27 08:32:51 L1=1.34 run=2 blk=0 avail=6663 (56.8%) swpO=0 conn=2 myRSS=2598 php=1 phpRSS=40 ap=37 tcp=35 topuser=evolution 2026-08-27 08:33:01 L1=1.28 run=4 blk=0 avail=6602 (56.3%) swpO=0 conn=2 myRSS=2598 php=4 phpRSS=181 ap=36 tcp=45 topuser=evolution 2026-08-27 08:33:01 L1=1.28 run=7 blk=0 avail=6578 (56.1%) swpO=0 conn=2 myRSS=2598 php=3 phpRSS=139 ap=36 tcp=45 topuser=evolution 2026-08-27 08:33:11 L1=1.39 run=3 blk=0 avail=6557 (55.9%) swpO=0 conn=3 myRSS=2599 php=3 phpRSS=173 ap=40 tcp=41 topuser=evolution 2026-08-27 08:33:11 L1=1.39 run=5 blk=0 avail=6560 (55.9%) swpO=0 conn=2 myRSS=2599 php=3 phpRSS=111 ap=40 tcp=41 topuser=madalice 2026-08-27 08:33:21 L1=1.64 run=3 blk=0 avail=6665 (56.8%) swpO=2 conn=3 myRSS=2599 php=3 phpRSS=102 ap=38 tcp=44 topuser=evolution 2026-08-27 08:33:21 L1=1.64 run=5 blk=0 avail=6657 (56.8%) swpO=2 conn=2 myRSS=2599 php=3 phpRSS=114 ap=38 tcp=44 topuser=evolution 2026-08-27 08:33:31 L1=1.47 run=1 blk=0 avail=6643 (56.6%) swpO=2 conn=3 myRSS=2599 php=1 phpRSS=39 ap=41 tcp=53 topuser=evolution 2026-08-27 08:33:31 L1=1.47 run=2 blk=0 avail=6642 (56.6%) swpO=2 conn=2 myRSS=2599 php=1 phpRSS=39 ap=41 tcp=53 topuser=evolution 2026-08-27 08:33:41 L1=1.47 run=2 blk=0 avail=6518 (55.6%) swpO=0 conn=3 myRSS=2599 php=2 phpRSS=208 ap=39 tcp=40 topuser=madalice 2026-08-27 08:33:41 L1=1.47 run=3 blk=0 avail=6515 (55.5%) swpO=0 conn=2 myRSS=2599 php=2 phpRSS=211 ap=39 tcp=39 topuser=madalice 2026-08-27 08:33:51 L1=1.24 run=1 blk=0 avail=6682 (57.0%) swpO=0 conn=3 myRSS=2599 php=1 phpRSS=39 ap=35 tcp=45 topuser=evolution 2026-08-27 08:33:51 L1=1.24 run=2 blk=0 avail=6680 (57.0%) swpO=0 conn=2 myRSS=2599 php=0 phpRSS=0 ap=35 tcp=45 topuser=- 2026-08-27 08:34:01 L1=1.36 run=4 blk=0 avail=6404 (54.6%) swpO=0 conn=3 myRSS=2599 php=2 phpRSS=169 ap=60 tcp=45 topuser=olympic 2026-08-27 08:34:01 L1=1.36 run=4 blk=0 avail=6401 (54.6%) swpO=0 conn=2 myRSS=2599 php=2 phpRSS=171 ap=60 tcp=45 topuser=olympic 2026-08-27 08:34:11 L1=1.15 run=2 blk=0 avail=6582 (56.1%) swpO=0 conn=1 myRSS=2599 php=0 phpRSS=0 ap=50 tcp=45 topuser=- 2026-08-27 08:34:11 L1=1.15 run=2 blk=0 avail=6582 (56.1%) swpO=0 conn=2 myRSS=2599 php=0 phpRSS=0 ap=50 tcp=45 topuser=- 2026-08-27 08:34:21 L1=1.12 run=3 blk=0 avail=6551 (55.9%) swpO=0 conn=1 myRSS=2601 php=2 phpRSS=99 ap=49 tcp=46 topuser=otterfencing 2026-08-27 08:34:21 L1=1.12 run=5 blk=0 avail=6543 (55.8%) swpO=0 conn=2 myRSS=2601 php=2 phpRSS=102 ap=49 tcp=46 topuser=otterfencing 2026-08-27 08:34:31 L1=1.02 run=2 blk=0 avail=6636 (56.6%) swpO=0 conn=1 myRSS=2601 php=1 phpRSS=35 ap=41 tcp=49 topuser=evolution 2026-08-27 08:34:31 L1=1.02 run=3 blk=0 avail=6630 (56.5%) swpO=0 conn=1 myRSS=2601 php=1 phpRSS=41 ap=41 tcp=49 topuser=evolution 2026-08-27 08:34:41 L1=1.18 run=6 blk=0 avail=6337 (54.0%) swpO=2 conn=1 myRSS=2601 php=4 phpRSS=345 ap=46 tcp=46 topuser=madalice 2026-08-27 08:34:41 L1=1.18 run=9 blk=0 avail=6339 (54.0%) swpO=2 conn=1 myRSS=2601 php=2 phpRSS=252 ap=46 tcp=46 topuser=madalice 2026-08-27 08:34:51 L1=1.31 run=2 blk=0 avail=6630 (56.5%) swpO=2 conn=1 myRSS=2601 php=0 phpRSS=0 ap=41 tcp=47 topuser=- 2026-08-27 08:34:51 L1=1.31 run=2 blk=0 avail=6642 (56.6%) swpO=2 conn=1 myRSS=2601 php=0 phpRSS=0 ap=41 tcp=48 topuser=- 2026-08-27 08:35:01 L1=1.41 run=5 blk=0 avail=6430 (54.8%) swpO=2 conn=1 myRSS=2601 php=3 phpRSS=268 ap=41 tcp=42 topuser=alison 2026-08-27 08:35:01 L1=1.41 run=8 blk=0 avail=6415 (54.7%) swpO=2 conn=1 myRSS=2601 php=3 phpRSS=267 ap=41 tcp=42 topuser=alison 2026-08-27 08:35:12 L1=1.58 run=25 blk=0 avail=5390 (46.0%) swpO=40 conn=14 myRSS=2598 php=13 phpRSS=1714 ap=41 tcp=50 topuser=evolution 2026-08-27 08:35:12 L1=1.58 run=19 blk=3 avail=5271 (44.9%) swpO=125 conn=14 myRSS=2597 php=13 phpRSS=1754 ap=41 tcp=50 topuser=evolution