INCIDENT 2026-08-12 20:34:36 trigger: load=84.70/10cpu ================================================================== load: 84.70 117.44 58.34 2/620 185716 ncpu:10 mem_avail: 9039MB/11729MB (77.1%) swap_used:1628MB swapout:0/s blocked(D):0 running:4 iowait:0.6% steal:0.0% php: 1 procs / 188MB heaviest user: corpkicks (1 procs, 188MB) apache: 46 procs tcp_estab: 29 --- RSS by user (all processes) --- USER PROCS RSS_MB nobody 45 577 mysql 1 487 root 246 432 netdata 8 222 corpkicks 1 197 cpanellogin 1 28 mailman 20 24 wp-toolkit 6 17 dovenull 6 16 zabbix 1 12 alison 1 11 candyfabcom 1 10 mailnull 2 9 dovecot 3 9 evolution 11 6 polkitd 1 3 dbus 1 3 cpanelconnecttrack 1 3 named 1 2 kurri 1 2 --- php workers by user --- USER PROCS RSS_MB corpkicks 1 199 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 1330 MB Active(file): 846 MB Inactive(file): 568 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 173 MB CommitLimit: 9960 MB Committed_AS: 7244 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3432421 root 19:23:20 0 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 498948 5.9 Ssl 01:04 /usr/sbin/mariadbd 1220 1 netdata 173036 2.5 Ssl 44-10:24:37 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3478969 3472245 root 153496 0.0 S 17:59:43 spamd child 3472245 1 root 58512 0.0 Ss 18:11:53 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4922 2431 netdata 39344 0.1 Sl 44-10:24:32 /usr/libexec/netdata/plugins.d/go.d.plugin 1 159820 1 root 34144 0.0 Ss 23-10:47:45 /usr/lib/systemd/systemd-journald 167479 1353308 cpanellogin 29108 0.0 S 32:02 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 185640 1469 root 24820 1.0 S 00:01 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 183952 1276780 nobody 20036 1.1 S 02:51 /usr/sbin/httpd -k start 183890 1276780 nobody 19796 0.7 S 05:25 /usr/sbin/httpd -k start 183704 1276780 nobody 18864 0.1 S 06:21 /usr/sbin/httpd -k start 183709 1276780 nobody 18812 0.0 S 06:20 /usr/sbin/httpd -k start 183859 1276780 nobody 18304 1.5 S 05:31 /usr/sbin/httpd -k start 3979356 3472245 root 18188 0.0 S 07:23:33 spamd child 183723 1276780 nobody 18136 0.2 S 06:19 /usr/sbin/httpd -k start 183887 1276780 nobody 18024 1.4 S 05:27 /usr/sbin/httpd -k start 183703 1276780 nobody 17908 0.0 S 06:21 /usr/sbin/httpd -k start 183712 1276780 nobody 17888 0.0 S 06:20 /usr/sbin/httpd -k start 2223 1201 root 17476 0.0 Sl 44-10:24:36 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 183564 1276780 nobody 17456 0.0 S 06:26 /usr/sbin/httpd -k start 183721 1276780 nobody 17384 0.2 S 06:19 /usr/sbin/httpd -k start 183478 1276780 nobody 17368 0.0 S 06:27 /usr/sbin/httpd -k start 183305 1276780 nobody 15648 0.0 S 06:34 /usr/sbin/httpd -k start 183150 1276780 nobody 15248 0.0 S 06:42 /usr/sbin/httpd -k start 183153 1276780 nobody 15168 0.0 S 06:42 /usr/sbin/httpd -k start 183966 1276780 nobody 14760 1.1 S 02:25 /usr/sbin/httpd -k start 183296 1276780 nobody 14400 0.0 S 06:34 /usr/sbin/httpd -k start 183350 1276780 nobody 13728 0.1 S 06:28 /usr/sbin/httpd -k start 183125 1276780 nobody 13304 0.0 S 06:43 /usr/sbin/httpd -k start 1204 1 zabbix 13128 0.2 Ssl 44-10:24:37 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 181924 1276780 nobody 13092 0.0 S 09:21 /usr/sbin/httpd -k start 185104 2431 netdata 12892 2.3 Sl 00:55 /usr/libexec/netdata/plugins.d/apps.plugin 1 183298 1276780 nobody 12880 0.1 S 06:34 /usr/sbin/httpd -k start 183143 1276780 nobody 12552 0.0 S 06:42 /usr/sbin/httpd -k start 1353308 1 root 12536 0.0 Ss 21-17:53:07 cpsrvd (SSL) - waiting for connections 181727 1276780 nobody 12520 0.0 S 09:29 /usr/sbin/httpd -k start 183118 1276780 nobody 12320 0.0 S 06:44 /usr/sbin/httpd -k start 183147 1276780 nobody 12248 0.0 S 06:42 /usr/sbin/httpd -k start 185179 3828812 alison 12144 0.0 S 00:51 dovecot/imap 183301 1276780 nobody 12084 0.1 S 06:34 /usr/sbin/httpd -k start 183294 1276780 nobody 11832 0.1 S 06:34 /usr/sbin/httpd -k start 183190 1276780 nobody 11728 0.0 S 06:38 /usr/sbin/httpd -k start 183145 1276780 nobody 11664 0.5 S 06:42 /usr/sbin/httpd -k start 183139 1276780 nobody 11612 0.0 S 06:42 /usr/sbin/httpd -k start 183127 1276780 nobody 11596 0.0 S 06:43 /usr/sbin/httpd -k start 180155 1276780 nobody 11580 0.1 S 12:24 /usr/sbin/httpd -k start 183113 1276780 nobody 11556 0.1 S 06:45 /usr/sbin/httpd -k start 183297 1276780 nobody 11388 0.0 S 06:34 /usr/sbin/httpd -k start 184203 3828812 root 11388 0.0 S 01:09 dovecot/auth -w 183124 1276780 nobody 11384 0.1 S 06:43 /usr/sbin/httpd -k start 185355 3828812 candyfabcom 11212 0.0 S 00:32 dovecot/quota-status -p postfix 183275 1276780 nobody 11000 0.0 S 06:35 /usr/sbin/httpd -k start 183231 1276780 nobody 10924 2.0 S 06:37 /usr/sbin/httpd -k start 183141 1276780 nobody 10840 0.0 S 06:42 /usr/sbin/httpd -k start 183114 1276780 nobody 10752 0.0 S 06:45 /usr/sbin/httpd -k start 183303 1276780 nobody 10752 0.0 S 06:34 /usr/sbin/httpd -k start 3471498 1 root 10596 0.0 Ss 18:12:24 lfd - sleeping 1463 1 root 10164 0.0 Ss 44-10:24:36 tailwatchd 183277 1276780 nobody 10088 0.0 S 06:35 /usr/sbin/httpd -k start 1469 1 root 9748 0.1 Ss 44-10:24:36 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 128 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/portal.evolutionerp.com.au-ssl_log 16 corpkicks/corporatekicks.com.au-ssl_log 12 evolution/my.evolutionerp.com.au-ssl_log 6 infinium/infinium.net.au-ssl_log 6 madalice/madalice.com.au-ssl_log 2 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 16 203.54.180.238 10 202.153.211.134 3 40.77.167.21 3 147.161.213.78 3 118.127.40.55 2 68.183.22.192 1 64.202.189.56 1 5.47.164.164 1 35.157.144.199 1 209.42.18.223 1 129.121.103.155 --- top request paths across all vhosts (last 3 min) --- 16 GET /heartbeat.php 3 POST /wp-admin/admin-ajax.php 3 POST /functions.php 3 GET /index.php 3 GET / 2 POST /wp-cron.php 2 GET /wp-login.php 2 GET /wp-json/wp/v2/users/me 1 POST /wp-login.php 1 HEAD / 1 GET /wp-json/yoast/v1/statistics 1 GET /wp-admin/admin-ajax.php 1 GET /wp-admin/ 1 GET /nike-by-you-australia/ 1 GET /how-it-works/ 1 GET /design-your-own-custom-shoes/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 16 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [12/Aug/2026:20:33:33 +1000] "GET /heartbeat.php?sentAt=1786530813&bytes=106,124,75,253&_=1786517961094 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:33:37 +1000] "GET /heartbeat.php?sentAt=1786530817&bytes=106,124,76,1&_=1786510905537 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [12/Aug/2026:20:33:43 +1000] "GET /heartbeat.php?sentAt=1786530823&bytes=106,124,76,7&_=1786517961095 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [12/Aug/2026:20:33:47 +1000] "GET /heartbeat.php?sentAt=1786530827&bytes=106,124,76,11&_=1786510905538 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:33:53 +1000] "GET /heartbeat.php?sentAt=1786530833&bytes=106,124,76,17&_=1786517961096 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:33:57 +1000] "GET /heartbeat.php?sentAt=1786530837&bytes=106,124,76,21&_=1786510905539 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:34:03 +1000] "GET /heartbeat.php?sentAt=1786530843&bytes=106,124,76,27&_=1786517961097 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:34:07 +1000] "GET /heartbeat.php?sentAt=1786530847&bytes=106,124,76,31&_=1786510905540 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:34:13 +1000] "GET /heartbeat.php?sentAt=1786530853&bytes=106,124,76,37&_=1786517961098 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [12/Aug/2026:20:34:17 +1000] "GET /heartbeat.php?sentAt=1786530857&bytes=106,124,76,41&_=1786510905541 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 3 GET / 2 POST /wp-admin/admin-ajax.php 1 POST /wp-cron.php 1 HEAD / 1 GET /wp-json/yoast/v1/statistics 1 GET /wp-admin/admin-ajax.php 1 GET /wp-admin/ 1 GET /how-it-works/ 1 GET /design-your-own-custom-shoes/ -- last 10 requests -- 202.153.211.134 - - [12/Aug/2026:20:33:30 +1000] "GET / HTTP/1.1" 500 833 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0" 202.153.211.134 - - [12/Aug/2026:20:34:11 +1000] "GET /wp-admin/ HTTP/1.1" 200 89932 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.0" 118.127.40.55 - - [12/Aug/2026:20:34:21 +1000] "POST /wp-cron.php?doing_wp_cron=1786530861.4438679218292236328125 HTTP/1.1" 200 1 "-" "WordPress/7.0.3; https://corporatekicks.com.au" 202.153.211.134 - - [12/Aug/2026:20:34:22 +1000] "GET /wp-json/yoast/v1/statistics HTTP/1.1" 200 312 "https://corporatekicks.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge 202.153.211.134 - - [12/Aug/2026:20:34:23 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 82 "https://corporatekicks.com.au/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) 202.153.211.134 - - [12/Aug/2026:20:34:23 +1000] "GET /wp-admin/admin-ajax.php?action=woocommerce_load_status_widget&security=9fe805d817 HTTP/1.1" 200 727 "https://corporatekicks.com.au/wp-admin/" "Mozilla/5.0 (Windows N 202.153.211.134 - - [12/Aug/2026:20:34:24 +1000] "GET / HTTP/1.1" 200 25646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0" 118.127.40.55 - - [12/Aug/2026:20:34:20 +1000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=ec38f568a0 HTTP/1.1" 200 1 "-" "WordPress/7.0.3; https://corporatekicks.com.au" 202.153.211.134 - - [12/Aug/2026:20:34:31 +1000] "GET /how-it-works/ HTTP/1.1" 200 17308 "https://corporatekicks.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 202.153.211.134 - - [12/Aug/2026:20:34:33 +1000] "GET /design-your-own-custom-shoes/ HTTP/1.1" 200 17659 "https://corporatekicks.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 3 POST /functions.php 3 GET /index.php -- last 10 requests -- 147.161.213.78 - - [12/Aug/2026:20:33:30 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G 147.161.213.78 - - [12/Aug/2026:20:33:30 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G 147.161.213.78 - - [12/Aug/2026:20:33:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G 40.77.167.21 - - [12/Aug/2026:20:33:30 +1000] "GET /index.php?page=activities&keyword=UTMB HTTP/1.1" 500 4315 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot. 40.77.167.21 - - [12/Aug/2026:20:33:44 +1000] "GET /index.php?page=activities&keyword=books+like+the+expanse+and+3+world+solution HTTP/1.1" 200 5288 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bin 40.77.167.21 - - [12/Aug/2026:20:33:45 +1000] "GET /index.php?page=activities&keyword=metung HTTP/1.1" 200 5260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbo --- last 30 samples (run-up to this incident) --- 2026-08-12 20:27:18 L1=0.50 run=1 blk=0 avail=7036 (60.0%) swpO=0 conn=2 myRSS=2398 php=1 phpRSS=39 ap=17 tcp=25 topuser=evolution 2026-08-12 20:27:18 L1=0.46 run=2 blk=0 avail=7046 (60.1%) swpO=0 conn=1 myRSS=2398 php=0 phpRSS=0 ap=17 tcp=25 topuser=- 2026-08-12 20:27:28 L1=0.43 run=1 blk=0 avail=7036 (60.0%) swpO=0 conn=2 myRSS=2398 php=1 phpRSS=39 ap=17 tcp=23 topuser=evolution 2026-08-12 20:27:28 L1=0.47 run=2 blk=0 avail=7047 (60.1%) swpO=0 conn=1 myRSS=2398 php=0 phpRSS=0 ap=17 tcp=23 topuser=- 2026-08-12 20:27:38 L1=0.51 run=3 blk=0 avail=7009 (59.8%) swpO=0 conn=2 myRSS=2398 php=2 phpRSS=79 ap=17 tcp=24 topuser=evolution 2026-08-12 20:27:38 L1=0.47 run=1 blk=0 avail=7045 (60.1%) swpO=0 conn=1 myRSS=2398 php=0 phpRSS=0 ap=17 tcp=23 topuser=- 2026-08-12 20:27:48 L1=0.43 run=1 blk=0 avail=7037 (60.0%) swpO=0 conn=2 myRSS=2398 php=1 phpRSS=39 ap=17 tcp=22 topuser=evolution 2026-08-12 20:27:48 L1=0.48 run=1 blk=0 avail=7048 (60.1%) swpO=0 conn=1 myRSS=2398 php=0 phpRSS=0 ap=17 tcp=22 topuser=- 2026-08-12 20:27:58 L1=1.40 run=5 blk=0 avail=6712 (57.2%) swpO=489 conn=2 myRSS=2387 php=5 phpRSS=297 ap=48 tcp=56 topuser=madalice 2026-08-12 20:27:59 L1=1.61 run=5 blk=0 avail=6503 (55.4%) swpO=444 conn=5 myRSS=2387 php=4 phpRSS=454 ap=48 tcp=55 topuser=madalice 2026-08-12 20:28:08 L1=2.12 run=25 blk=0 avail=5368 (45.8%) swpO=0 conn=17 myRSS=2387 php=18 phpRSS=1808 ap=77 tcp=111 topuser=madalice 2026-08-12 20:28:09 L1=3.47 run=27 blk=0 avail=4941 (42.1%) swpO=0 conn=20 myRSS=2387 php=20 phpRSS=2299 ap=77 tcp=117 topuser=madalice 2026-08-12 20:28:20 L1=15.10 run=34 blk=41 avail=327 (2.8%) swpO=38883 conn=61 myRSS=1944 php=63 phpRSS=8200 ap=111 tcp=133 topuser=madalice 2026-08-12 20:28:22 L1=15.10 run=13 blk=84 avail=357 (3.0%) swpO=44059 conn=57 myRSS=1770 php=67 phpRSS=8401 ap=111 tcp=130 topuser=madalice 2026-08-12 20:29:03 L1=74.50 run=50 blk=104 avail=185 (1.6%) swpO=1086 conn=- myRSS=1723 php=88 phpRSS=5637 ap=112 tcp=343 topuser=madalice 2026-08-12 20:28:35 L1=38.08 run=113 blk=10 avail=71 (0.6%) swpO=18135 conn=- myRSS=1724 php=88 phpRSS=5769 ap=111 tcp=343 topuser=madalice 2026-08-12 20:33:35 L1=228.47 run=4 blk=2 avail=8182 (69.8%) swpO=280 conn=5 myRSS=468 php=4 phpRSS=554 ap=107 tcp=63 topuser=madalice 2026-08-12 20:33:35 L1=228.47 run=4 blk=2 avail=8187 (69.8%) swpO=336 conn=5 myRSS=468 php=4 phpRSS=552 ap=107 tcp=63 topuser=madalice 2026-08-12 20:33:45 L1=193.66 run=1 blk=0 avail=8901 (75.9%) swpO=0 conn=1 myRSS=473 php=0 phpRSS=0 ap=97 tcp=53 topuser=- 2026-08-12 20:33:45 L1=193.66 run=2 blk=0 avail=8900 (75.9%) swpO=0 conn=1 myRSS=473 php=0 phpRSS=0 ap=97 tcp=53 topuser=- 2026-08-12 20:33:55 L1=164.03 run=1 blk=0 avail=8873 (75.7%) swpO=0 conn=2 myRSS=477 php=1 phpRSS=105 ap=87 tcp=48 topuser=corpkicks 2026-08-12 20:33:55 L1=164.03 run=5 blk=0 avail=8871 (75.6%) swpO=0 conn=2 myRSS=477 php=1 phpRSS=105 ap=87 tcp=48 topuser=corpkicks 2026-08-12 20:34:05 L1=138.97 run=1 blk=1 avail=8911 (76.0%) swpO=0 conn=3 myRSS=478 php=1 phpRSS=128 ap=77 tcp=43 topuser=tubesupplies 2026-08-12 20:34:05 L1=138.97 run=2 blk=1 avail=8910 (76.0%) swpO=0 conn=2 myRSS=478 php=1 phpRSS=128 ap=77 tcp=43 topuser=tubesupplies 2026-08-12 20:34:15 L1=117.76 run=3 blk=1 avail=8821 (75.2%) swpO=0 conn=4 myRSS=482 php=2 phpRSS=283 ap=67 tcp=41 topuser=corpkicks 2026-08-12 20:34:15 L1=117.76 run=5 blk=1 avail=8820 (75.2%) swpO=0 conn=3 myRSS=482 php=2 phpRSS=283 ap=67 tcp=41 topuser=corpkicks 2026-08-12 20:34:25 L1=99.89 run=4 blk=1 avail=8615 (73.5%) swpO=0 conn=4 myRSS=485 php=3 phpRSS=593 ap=56 tcp=45 topuser=corpkicks 2026-08-12 20:34:25 L1=99.89 run=4 blk=1 avail=8614 (73.4%) swpO=0 conn=4 myRSS=485 php=3 phpRSS=593 ap=56 tcp=45 topuser=corpkicks 2026-08-12 20:34:36 L1=84.70 run=4 blk=0 avail=9039 (77.1%) swpO=0 conn=3 myRSS=487 php=1 phpRSS=188 ap=46 tcp=29 topuser=corpkicks 2026-08-12 20:34:36 L1=84.70 run=4 blk=0 avail=9039 (77.1%) swpO=0 conn=2 myRSS=487 php=1 phpRSS=188 ap=46 tcp=29 topuser=corpkicks