INCIDENT 2026-09-04 02:54:22 trigger: php_rss=2185MB mysql_conn=16 ================================================================== load: 3.69 1.46 1.10 20/724 2706812 ncpu:10 mem_avail: 6922MB/13777MB (50.2%) swap_used:1619MB swapout:792/s blocked(D):0 running:19 iowait:0.0% steal:0.0% php: 20 procs / 2185MB heaviest user: customc (13 procs, 1536MB) apache: 41 procs tcp_estab: 48 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3006 customc 13 1499 root 251 1019 nobody 40 652 evolution 14 473 netdata 8 253 madalice 1 132 aaa 2 76 wp-toolkit 3 62 infinium 3 35 dovenull 6 27 mailman 20 26 kurri 2 22 cpanellogin 1 18 lowrange 1 13 zabbix 1 11 cpanelphpmyadmin 1 11 corpkicks 1 11 polkitd 1 10 mailnull 2 10 --- php workers by user --- USER PROCS RSS_MB customc 13 1348 evolution 4 447 madalice 1 132 aaa 1 64 root 1 34 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5961 MB Active(file): 3836 MB Inactive(file): 2358 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 681 MB CommitLimit: 10984 MB Committed_AS: 8884 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 3-00:31:55 5796 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3078692 12.9 Rsl 1-12:40:10 /usr/sbin/mariadbd 2705612 2703884 evolution 196528 1.2 S 01:21 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706632 2706508 evolution 196064 14.1 S 00:08 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706739 2706503 customc 187880 40.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1542443 1 netdata 186064 2.5 Ssl 1-00:32:00 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2603077 1 root 175628 0.2 Ss 30:11 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2706744 2706560 customc 170516 37.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2654375 2603077 root 169760 0.0 S 15:15 spamd child 2654376 2603077 root 168188 0.0 S 15:15 spamd child 2706749 2706558 customc 147752 60.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706754 2706569 customc 142132 53.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706751 2706567 customc 140808 54.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706425 2601907 madalice 135960 12.0 S 00:11 php-fpm: pool madalice_com_au 2706750 2705384 customc 130576 50.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706753 2706568 customc 123884 47.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706759 2706573 customc 98824 33.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 509266 1 root 95968 0.0 Ss 7-00:34:41 /usr/lib/systemd/systemd-journald 2706755 2705287 customc 93560 29.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706752 2706570 aaa 79988 43.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2706758 2706565 evolution 71928 16.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706797 2706572 customc 69432 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706801 2706564 customc 54408 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2706828 2706509 customc 53564 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1542981 1542551 netdata 41652 0.1 Sl 1-00:31:56 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 41636 0.1 Ss 44-00:13:07 cpsrvd (SSL) - waiting for connections 509236 509098 root 41396 0.0 Sl 7-00:34:41 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2706854 2705706 evolution 40156 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2706847 2706427 customc 37412 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2601907 1 root 35224 0.0 Ss 30:56 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542487 1 wp-toolkit 34884 0.0 Ss 1-00:32:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1469 1 root 34676 0.1 Ss 66-16:44:36 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2602226 1 root 28764 0.1 Ssl 30:41 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 26688 0.0 Ss 66-16:44:36 tailwatchd 1542531 1 wp-toolkit 22768 0.0 Ss 1-00:31:59 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2688747 506832 nobody 21652 0.0 S 05:30 /usr/sbin/httpd -k start 1542141 1 root 21536 0.0 Ss 1-00:32:03 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2689407 506832 nobody 20768 0.0 S 04:37 /usr/sbin/httpd -k start 2703888 506832 nobody 20680 0.0 S 03:52 /usr/sbin/httpd -k start 2705687 506832 nobody 20360 0.0 S 01:18 /usr/sbin/httpd -k start 2706088 506832 nobody 20056 0.0 S 00:42 /usr/sbin/httpd -k start 2705287 506832 nobody 19540 0.0 S 01:48 /usr/sbin/httpd -k start 2705711 506832 nobody 19344 0.0 S 01:16 /usr/sbin/httpd -k start 2704892 1353308 cpanellogin 19096 0.0 S 02:35 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 2703884 506832 nobody 19072 0.0 S 03:53 /usr/sbin/httpd -k start 2706404 506832 nobody 19012 0.1 S 00:13 /usr/sbin/httpd -k start 2705384 506832 nobody 18892 0.0 S 01:41 /usr/sbin/httpd -k start 2705704 506832 nobody 18652 0.0 S 01:16 /usr/sbin/httpd -k start 1542982 1542551 netdata 18124 2.1 Sl 1-00:31:56 /usr/libexec/netdata/plugins.d/apps.plugin 1 2705706 506832 nobody 17840 0.2 S 01:16 /usr/sbin/httpd -k start 2706415 506832 nobody 17704 0.0 S 00:12 /usr/sbin/httpd -k start 2706563 506832 nobody 17588 0.0 S 00:09 /usr/sbin/httpd -k start 2705680 506832 nobody 17492 0.0 S 01:19 /usr/sbin/httpd -k start 2706566 506832 nobody 17444 0.0 S 00:09 /usr/sbin/httpd -k start 2706429 506832 nobody 17088 0.0 S 00:11 /usr/sbin/httpd -k start 2706508 506832 nobody 17040 0.0 S 00:10 /usr/sbin/httpd -k start 2706570 506832 nobody 16972 0.0 S 00:09 /usr/sbin/httpd -k start 2706565 506832 nobody 16928 0.1 S 00:09 /usr/sbin/httpd -k start 2706427 506832 nobody 16920 0.0 S 00:11 /usr/sbin/httpd -k start 2706502 506832 nobody 16916 0.0 S 00:10 /usr/sbin/httpd -k start 2706428 506832 nobody 16848 0.0 S 00:11 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+-----------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+-----------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 6820248 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 6820247 | root | evolution | Execute | 0 | Commit | UPDATE rate_limits SET count = count + 1 WHERE cache_key = ? | +---------+------+-----------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 146 customc/customcentral.com.au-ssl_log 133 olytis/tis.com.au-ssl_log 124 coscom/swms.coscom.com.au 93 evolution/portal.evolutionerp.com.au-ssl_log 12 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 146 40.115.94.245 135 93.123.109.228 119 4.204.224.164 93 20.104.49.130 12 203.54.180.238 5 143.198.219.236 4 45.148.10.120 4 118.127.40.55 3 85.206.128.219 1 47.251.90.48 1 40.77.167.57 1 147.93.171.182 1 134.199.218.54 1 114.119.147.58 1 114.119.143.14 --- top request paths across all vhosts (last 3 min) --- 54 GET /api/getItem/LWHG2001KG 12 GET /heartbeat.php 6 GET / 4 POST /wp-cron.php 4 GET /api/getItem/PWFBW3151KG 3 GET /admin.php 2 POST / 2 GET /wp.php 2 GET /wp-content/themes/index.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /this_is_a_new_hello_world.php 2 GET /store/custom-bulldogs-kids/ 2 GET /simple.php 2 GET /red.php 2 GET /ops.php 2 GET /media.php 2 GET /makeasmtp.php 2 GET /mac.php 2 GET /k.php 2 GET /images.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 54 GET /api/getItem/LWHG2001KG 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 2 GET /api/getItem/CLSGNSTD40250KK 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG757550-8 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757530-8 -- last 10 requests -- 40.115.94.245 - - [04/Sep/2026:02:54:14 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:15 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:15 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:16 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:16 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:17 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:17 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:18 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:18 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:02:54:18 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" == customc/customcentral.com.au-ssl_log == -- top paths -- 5 GET / 4 POST /wp-cron.php 2 GET /.env.production 2 GET /.env 2 GET /.aws/credentials 1 POST /wp-login.php 1 GET /.wp-config.php.swp 1 GET /.well-known/stripe.txt 1 GET /.well-known/stripe/ 1 GET /.well-known/acme-challenge/* 1 GET /.well-known/acme-challenge/ 1 GET /.well-known/* -- last 10 requests -- 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /README.md HTTP/1.1" 404 73279 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:127.0) Gecko/20100101 Firefox/127.0" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /Dockerfile HTTP/1.1" 404 73280 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /Docker.md HTTP/1.1" 404 73279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /[locale]/* HTTP/1.1" 404 73281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /?pp=env HTTP/1.1" 200 97146 "https://customcentral.com.au/?pp=env&pp=env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Versi 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /NOTES.md HTTP/1.1" 404 73278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 93.123.109.228 - - [04/Sep/2026:02:54:22 +1000] "GET /[tenant]/* HTTP/1.1" 404 73281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /[...catchAll] HTTP/1.1" 404 73283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /[slug] HTTP/1.1" 404 73276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 93.123.109.228 - - [04/Sep/2026:02:54:21 +1000] "GET /[id] HTTP/1.1" 404 73274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" == olytis/tis.com.au-ssl_log == -- top paths -- 3 GET /admin.php 2 GET /wp-content/themes/index.php 2 GET /av.php 1 GET /xs.php 1 GET //xmlrpc.php 1 GET /xiugai.php 1 GET /wp-temp.php 1 GET /wp.php 1 GET /wp-manager.php 1 GET /wp-includes/Text/Diff/Engine/about.php 1 GET /wp-includes/Requests/ 1 GET /wp-includes/l10n/ -- last 10 requests -- 4.204.224.164 - - [04/Sep/2026:02:53:30 +1000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:31 +1000] "GET /xs.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:31 +1000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:32 +1000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:32 +1000] "GET /billzgs.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:33 +1000] "GET /CAE-2.5.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:33 +1000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:34 +1000] "GET /v4on3fxtoo5z5cq0yCdefault.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:34 +1000] "GET /8xmlr9ommwdy3ro8dCdefault.php HTTP/1.1" 401 36 "-" "-" 4.204.224.164 - - [04/Sep/2026:02:53:35 +1000] "GET /fms.php HTTP/1.1" 401 36 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-04 02:52:01 L1=0.64 run=1 blk=0 avail=8587 (62.3%) swpO=0 conn=1 myRSS=3025 php=3 phpRSS=190 ap=13 tcp=27 topuser=madalice 2026-09-04 02:52:01 L1=0.64 run=1 blk=0 avail=8588 (62.3%) swpO=0 conn=1 myRSS=3025 php=3 phpRSS=190 ap=13 tcp=27 topuser=madalice 2026-09-04 02:52:11 L1=0.54 run=4 blk=0 avail=8524 (61.9%) swpO=0 conn=2 myRSS=3025 php=4 phpRSS=281 ap=13 tcp=26 topuser=madalice 2026-09-04 02:52:11 L1=0.54 run=5 blk=0 avail=8521 (61.8%) swpO=0 conn=1 myRSS=3025 php=4 phpRSS=284 ap=13 tcp=26 topuser=madalice 2026-09-04 02:52:21 L1=0.45 run=1 blk=0 avail=8514 (61.8%) swpO=0 conn=2 myRSS=3025 php=3 phpRSS=262 ap=13 tcp=28 topuser=madalice 2026-09-04 02:52:21 L1=0.45 run=1 blk=0 avail=8514 (61.8%) swpO=0 conn=1 myRSS=3025 php=3 phpRSS=262 ap=13 tcp=28 topuser=madalice 2026-09-04 02:52:31 L1=0.62 run=2 blk=0 avail=8542 (62.0%) swpO=0 conn=2 myRSS=3025 php=3 phpRSS=240 ap=13 tcp=28 topuser=madalice 2026-09-04 02:52:31 L1=0.62 run=4 blk=0 avail=8522 (61.9%) swpO=0 conn=1 myRSS=3025 php=3 phpRSS=249 ap=13 tcp=28 topuser=madalice 2026-09-04 02:52:41 L1=0.52 run=1 blk=0 avail=8570 (62.2%) swpO=0 conn=2 myRSS=3025 php=3 phpRSS=193 ap=14 tcp=33 topuser=madalice 2026-09-04 02:52:41 L1=0.52 run=1 blk=0 avail=8569 (62.2%) swpO=0 conn=1 myRSS=3025 php=3 phpRSS=193 ap=14 tcp=35 topuser=madalice 2026-09-04 02:52:51 L1=0.44 run=1 blk=0 avail=8562 (62.1%) swpO=0 conn=2 myRSS=3025 php=3 phpRSS=193 ap=15 tcp=31 topuser=madalice 2026-09-04 02:52:51 L1=0.44 run=1 blk=0 avail=8561 (62.1%) swpO=0 conn=1 myRSS=3025 php=3 phpRSS=193 ap=15 tcp=33 topuser=madalice 2026-09-04 02:53:01 L1=0.53 run=3 blk=0 avail=8293 (60.2%) swpO=0 conn=2 myRSS=3025 php=6 phpRSS=532 ap=19 tcp=38 topuser=tubesupplies 2026-09-04 02:53:01 L1=0.53 run=3 blk=0 avail=8271 (60.0%) swpO=0 conn=4 myRSS=3025 php=6 phpRSS=546 ap=19 tcp=36 topuser=tubesupplies 2026-09-04 02:53:11 L1=0.53 run=1 blk=0 avail=8430 (61.2%) swpO=0 conn=2 myRSS=3025 php=3 phpRSS=226 ap=31 tcp=32 topuser=evolution 2026-09-04 02:53:11 L1=0.53 run=2 blk=0 avail=8429 (61.2%) swpO=0 conn=4 myRSS=3025 php=3 phpRSS=226 ap=31 tcp=34 topuser=evolution 2026-09-04 02:53:21 L1=0.60 run=2 blk=0 avail=8367 (60.7%) swpO=0 conn=2 myRSS=3025 php=4 phpRSS=381 ap=21 tcp=31 topuser=evolution 2026-09-04 02:53:22 L1=0.60 run=2 blk=0 avail=8362 (60.7%) swpO=0 conn=4 myRSS=3025 php=4 phpRSS=381 ap=21 tcp=29 topuser=evolution 2026-09-04 02:53:31 L1=0.51 run=1 blk=0 avail=8371 (60.8%) swpO=0 conn=2 myRSS=3025 php=4 phpRSS=382 ap=20 tcp=28 topuser=evolution 2026-09-04 02:53:32 L1=0.51 run=1 blk=0 avail=8370 (60.8%) swpO=0 conn=4 myRSS=3025 php=4 phpRSS=382 ap=20 tcp=28 topuser=evolution 2026-09-04 02:53:42 L1=0.43 run=1 blk=0 avail=8374 (60.8%) swpO=0 conn=2 myRSS=3025 php=4 phpRSS=383 ap=19 tcp=31 topuser=evolution 2026-09-04 02:53:42 L1=0.43 run=1 blk=0 avail=8373 (60.8%) swpO=0 conn=4 myRSS=3025 php=4 phpRSS=383 ap=19 tcp=31 topuser=evolution 2026-09-04 02:53:52 L1=0.44 run=1 blk=0 avail=8396 (60.9%) swpO=0 conn=2 myRSS=3025 php=4 phpRSS=383 ap=17 tcp=29 topuser=evolution 2026-09-04 02:53:52 L1=0.44 run=1 blk=0 avail=8396 (60.9%) swpO=0 conn=4 myRSS=3025 php=4 phpRSS=383 ap=17 tcp=29 topuser=evolution 2026-09-04 02:54:02 L1=0.53 run=3 blk=0 avail=8467 (61.5%) swpO=0 conn=2 myRSS=3025 php=4 phpRSS=313 ap=17 tcp=32 topuser=evolution 2026-09-04 02:54:02 L1=0.53 run=2 blk=0 avail=8463 (61.4%) swpO=0 conn=3 myRSS=3025 php=4 phpRSS=316 ap=17 tcp=32 topuser=evolution 2026-09-04 02:54:12 L1=0.85 run=7 blk=0 avail=8146 (59.1%) swpO=1 conn=7 myRSS=3025 php=8 phpRSS=690 ap=24 tcp=42 topuser=customc 2026-09-04 02:54:12 L1=0.85 run=6 blk=0 avail=8257 (59.9%) swpO=1 conn=3 myRSS=3025 php=8 phpRSS=572 ap=24 tcp=46 topuser=olympic 2026-09-04 02:54:22 L1=3.69 run=19 blk=0 avail=6922 (50.2%) swpO=792 conn=16 myRSS=3009 php=20 phpRSS=2185 ap=41 tcp=48 topuser=customc 2026-09-04 02:54:22 L1=3.69 run=21 blk=0 avail=6813 (49.5%) swpO=873 conn=16 myRSS=3006 php=22 phpRSS=2236 ap=41 tcp=48 topuser=customc