INCIDENT 2026-08-13 08:25:40 trigger: php_rss=2049MB mysql_conn=20 ================================================================== load: 1.67 1.54 1.44 23/631 615381 ncpu:10 mem_avail: 5737MB/11729MB (48.9%) swap_used:1008MB swapout:161/s blocked(D):0 running:36 iowait:0.0% steal:0.0% php: 21 procs / 2049MB heaviest user: olympic (19 procs, 1940MB) apache: 41 procs tcp_estab: 66 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1982 olympic 18 1901 root 235 866 nobody 40 671 netdata 8 253 evolution 6 112 cpanellogin 1 47 alison 3 37 lowrange 2 31 mailman 20 30 dovenull 6 27 kurri 2 23 wp-toolkit 6 22 mailnull 2 18 zabbix 1 15 infinium 1 15 aaa 1 13 candyfabcom 1 11 dovecot 3 9 named 1 7 --- php workers by user --- USER PROCS RSS_MB olympic 18 1816 evolution 2 107 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6004 MB Active(file): 4667 MB Inactive(file): 756 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 442 MB CommitLimit: 9960 MB Committed_AS: 10015 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 07:14:24 5240 /usr/bin/imunify-agent-proxy 611599 root 04:40 58336 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 2029968 6.1 Ssl 11:52:09 /usr/sbin/mariadbd 1220 1 netdata 202148 2.5 Ssl 44-22:15:42 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 388651 382990 root 186448 0.0 S 05:51:42 spamd child 388652 382990 root 167428 0.0 S 05:51:42 spamd child 382990 1 root 161828 0.0 Ss 06:02:54 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 615327 614285 olympic 156296 67.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615321 615272 olympic 152660 67.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615331 613318 olympic 152432 65.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615329 615270 olympic 144556 60.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615320 615260 olympic 137672 66.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615323 613048 olympic 136876 56.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615326 614278 olympic 127148 50.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615324 613071 olympic 126572 51.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615328 614713 olympic 121152 48.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615332 614758 olympic 110664 41.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615333 613697 olympic 107096 40.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615322 615273 olympic 106620 39.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615330 614319 olympic 98896 35.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615337 615336 olympic 94356 32.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615347 615344 olympic 90912 55.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615345 614277 olympic 78652 45.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 615365 612667 evolution 72280 15.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 615346 615343 olympic 71948 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 611599 1 root 58336 0.4 Ssl 04:40 /opt/imunify360/venv/bin/python3 -m imav.run 598448 1353308 cpanellogin 48756 0.0 S 19:05 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 1353308 1 root 42100 0.0 Ss 22-05:44:12 cpsrvd (SSL) - waiting for connections 1469 1 root 41708 0.1 Ss 44-22:15:41 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2223 1201 root 41332 0.0 Sl 44-22:15:41 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 37764 0.1 Sl 44-22:15:37 /usr/libexec/netdata/plugins.d/go.d.plugin 1 159820 1 root 31820 0.0 Ss 23-22:38:50 /usr/lib/systemd/systemd-journald 382254 1 root 30768 0.0 Ss 06:03:28 lfd - sleeping 613048 1276780 nobody 21392 0.0 S 02:51 /usr/sbin/httpd -k start 613697 1276780 nobody 20888 0.1 S 02:13 /usr/sbin/httpd -k start 613200 1276780 nobody 20732 0.0 S 02:43 /usr/sbin/httpd -k start 613071 1276780 nobody 20508 0.0 S 02:50 /usr/sbin/httpd -k start 613070 1276780 nobody 20420 0.0 S 02:50 /usr/sbin/httpd -k start 612678 1276780 nobody 20384 0.0 S 03:18 /usr/sbin/httpd -k start 609386 1276780 nobody 20368 0.0 S 06:52 /usr/sbin/httpd -k start 609918 1276780 nobody 20288 0.0 S 06:14 /usr/sbin/httpd -k start 607363 3828812 lowrange 19972 0.0 S 09:19 dovecot/imap 615270 1276780 nobody 19604 1.2 S 00:08 /usr/sbin/httpd -k start 614322 1276780 nobody 19588 0.1 S 01:20 /usr/sbin/httpd -k start 614319 1276780 nobody 19556 0.0 S 01:20 /usr/sbin/httpd -k start 612667 1276780 nobody 19312 0.1 S 03:19 /usr/sbin/httpd -k start 613318 1276780 nobody 19228 0.0 S 02:40 /usr/sbin/httpd -k start 614285 1276780 nobody 18828 0.0 S 01:21 /usr/sbin/httpd -k start 614674 1276780 nobody 18644 0.0 S 00:51 /usr/sbin/httpd -k start 614278 1276780 nobody 18524 0.0 S 01:22 /usr/sbin/httpd -k start 615271 1276780 nobody 18484 0.5 S 00:08 /usr/sbin/httpd -k start 615287 1276780 nobody 18376 0.1 S 00:07 /usr/sbin/httpd -k start 615261 1276780 nobody 18312 0.1 S 00:09 /usr/sbin/httpd -k start 614715 1276780 nobody 18060 0.0 S 00:50 /usr/sbin/httpd -k start 613201 1276780 nobody 18032 0.0 S 02:43 /usr/sbin/httpd -k start 185104 2431 netdata 17852 1.9 Sl 11:52:00 /usr/libexec/netdata/plugins.d/apps.plugin 1 615273 1276780 nobody 17772 0.1 S 00:08 /usr/sbin/httpd -k start 615260 1276780 nobody 17692 0.3 R 00:09 /usr/sbin/httpd -k start 615272 1276780 nobody 17628 0.3 S 00:08 /usr/sbin/httpd -k start 615283 1276780 nobody 17368 0.2 S 00:07 /usr/sbin/httpd -k start 614277 1276780 nobody 17240 0.0 S 01:22 /usr/sbin/httpd -k start 614287 1276780 nobody 16892 0.0 S 01:21 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 843927 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 574 evolution/portal.evolutionerp.com.au-ssl_log 206 evolution/evolutionerp.com.au-ssl_log 27 aaa/aaadownunder.com.au-ssl_log 25 infinium/infinium.net.au-ssl_log 14 corpkicks/corporatekicks.com.au-ssl_log 2 madalice/madalice.com.au-ssl_log 1 vinesit/westtankers.vinesit.com.au-ssl_log 1 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 385 203.54.180.238 164 180.181.236.49 108 150.228.163.151 81 103.104.165.99 21 103.104.164.114 18 35.252.127.169 17 23.99.130.35 8 182.239.240.254 7 118.127.40.55 5 147.161.215.87 4 207.46.13.9 4 161.248.189.130 3 207.46.13.92 2 91.92.243.249 2 91.92.243.248 --- top request paths across all vhosts (last 3 min) --- 154 POST /functions.php 85 POST /app/ajax.php 80 GET /factory_session_checker.php 73 GET /app/ajax.php 55 GET /index.php 41 GET /factory_session_processed_qty.php 41 GET /factory_session_joiner.php 32 POST /app/ajax/selectFilter.php 32 GET /heartbeat.php 29 POST /quoteditsave.php 27 POST /plugins/csvexporter/plugin.php 18 POST /app/ajax/selectFilterSingle.php 14 POST /clienteditsave.php 11 POST /wp-login.php 10 POST /itemModify.php 10 GET //app/ajax.php 9 POST /timesheets.php 9 POST //functions.php 9 GET /wp-login.php 8 POST /inveditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 154 POST /functions.php 85 POST /app/ajax.php 73 GET /app/ajax.php 48 GET /index.php 32 POST /app/ajax/selectFilter.php 29 POST /quoteditsave.php 27 POST /plugins/csvexporter/plugin.php 18 POST /app/ajax/selectFilterSingle.php 14 POST /clienteditsave.php 10 POST /itemModify.php 10 GET //app/ajax.php 9 POST /timesheets.php -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:08:25:38 +1000] "POST /app/ajax.php?call=projectFlagForReview HTTP/1.1" 200 2058 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 150.228.163.151 - - [13/Aug/2026:08:25:38 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinveditsub%26id%3D4360&call=getUserSetting&caller=ajaxSubmitLocal&seq=12883271881 HTTP/1.1" 200 100 "https://my.evolutionerp.co 182.239.240.254 - - [13/Aug/2026:08:25:38 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au//index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li 180.181.236.49 - - [13/Aug/2026:08:25:39 +1000] "POST /app/ajax.php HTTP/1.1" 200 127 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 203.54.180.238 - - [13/Aug/2026:08:25:39 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 150.228.163.151 - - [13/Aug/2026:08:25:39 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=4360" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 203.54.180.238 - - [13/Aug/2026:08:25:40 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa 150.228.163.151 - - [13/Aug/2026:08:25:39 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 11157 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=4360" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap 103.104.165.99 - - [13/Aug/2026:08:25:38 +1000] "GET /index.php?page=invoiceadd&invoiceid=65386 HTTP/1.1" 200 49612 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11827&tab=invoicingtab" "Mozilla/5.0 (Windows 103.104.165.99 - - [13/Aug/2026:08:25:41 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65386&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 80 GET /factory_session_checker.php 41 GET /factory_session_processed_qty.php 41 GET /factory_session_joiner.php 32 GET /heartbeat.php 7 GET /index.php 3 GET /factory_functions.php 2 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:08:25:19 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:08:25:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:08:25:22 +1000] "GET /factory_session_joiner.php?id=34552 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [13/Aug/2026:08:25:22 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [13/Aug/2026:08:25:21 +1000] "GET /heartbeat.php?sentAt=1786573522&bytes=106,124,242,210&_=1786532342403 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:08:25:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:08:25:26 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:08:25:28 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [13/Aug/2026:08:25:28 +1000] "GET /factory_session_joiner.php?id=34553 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [13/Aug/2026:08:25:27 +1000] "GET /heartbeat.php?sentAt=1786573528&bytes=106,124,242,216&_=1786570514703 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 4 GET /wp-login.php 3 GET /wp-json/wp/v2/users/me 2 POST /wp-login.php 1 POST /wp-cron.php 1 GET /wp-includes/ID3/index.php 1 GET /wp-includes/css 1 GET /wp-includes/blocks/search/index.php 1 GET /w.php 1 GET /wp-content/plugins/index.php 1 GET /wp-blog-header.php 1 GET /wp-admin/js/widgets 1 GET /wp-admin/includes -- last 10 requests -- 23.99.130.35 - - [13/Aug/2026:08:25:30 +1000] "GET /edit.php HTTP/1.1" 404 20237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:31 +1000] "GET /mini HTTP/1.1" 404 20235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:32 +1000] "GET /a.php HTTP/1.1" 404 20233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:33 +1000] "GET /w.php HTTP/1.1" 404 20233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:35 +1000] "GET /wp-admin/css HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:35 +1000] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:35 +1000] "GET /wp-admin/includes HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:35 +1000] "GET /wp-includes/css HTTP/1.1" 301 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:36 +1000] "GET /0x.php HTTP/1.1" 404 20235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.99.130.35 - - [13/Aug/2026:08:25:37 +1000] "GET /file.php HTTP/1.1" 404 20237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-13 08:23:19 L1=1.72 run=2 blk=0 avail=7217 (61.5%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=38 ap=38 tcp=37 topuser=evolution 2026-08-13 08:23:21 L1=1.72 run=2 blk=0 avail=7220 (61.6%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=42 ap=36 tcp=42 topuser=evolution 2026-08-13 08:23:29 L1=1.83 run=2 blk=0 avail=7212 (61.5%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=37 tcp=42 topuser=- 2026-08-13 08:23:31 L1=1.83 run=2 blk=0 avail=7211 (61.5%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=37 tcp=42 topuser=- 2026-08-13 08:23:40 L1=1.78 run=1 blk=0 avail=7241 (61.7%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=15 ap=34 tcp=37 topuser=evolution 2026-08-13 08:23:41 L1=1.78 run=2 blk=0 avail=7259 (61.9%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=32 tcp=34 topuser=- 2026-08-13 08:23:50 L1=1.66 run=3 blk=0 avail=7275 (62.0%) swpO=0 conn=1 myRSS=1976 php=2 phpRSS=74 ap=29 tcp=40 topuser=evolution 2026-08-13 08:23:51 L1=1.66 run=1 blk=0 avail=7271 (62.0%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=30 tcp=43 topuser=- 2026-08-13 08:24:00 L1=1.49 run=2 blk=0 avail=7252 (61.8%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=33 tcp=38 topuser=- 2026-08-13 08:24:01 L1=1.49 run=1 blk=0 avail=7259 (61.9%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=33 tcp=36 topuser=- 2026-08-13 08:24:10 L1=1.26 run=2 blk=0 avail=7218 (61.5%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=73 ap=32 tcp=43 topuser=infinium 2026-08-13 08:24:11 L1=1.26 run=1 blk=0 avail=7173 (61.2%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=122 ap=32 tcp=38 topuser=infinium 2026-08-13 08:24:20 L1=1.14 run=2 blk=0 avail=7195 (61.3%) swpO=0 conn=1 myRSS=1976 php=2 phpRSS=80 ap=38 tcp=46 topuser=evolution 2026-08-13 08:24:21 L1=1.14 run=1 blk=0 avail=7158 (61.0%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=46 tcp=49 topuser=- 2026-08-13 08:24:30 L1=1.04 run=2 blk=0 avail=7134 (60.8%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=57 ap=45 tcp=50 topuser=evolution 2026-08-13 08:24:31 L1=1.04 run=1 blk=0 avail=7159 (61.0%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=44 tcp=42 topuser=- 2026-08-13 08:24:40 L1=0.95 run=5 blk=0 avail=7041 (60.0%) swpO=0 conn=1 myRSS=1976 php=2 phpRSS=173 ap=36 tcp=46 topuser=infinium 2026-08-13 08:24:41 L1=0.95 run=2 blk=0 avail=7073 (60.3%) swpO=0 conn=3 myRSS=1976 php=3 phpRSS=229 ap=36 tcp=42 topuser=infinium 2026-08-13 08:24:50 L1=1.33 run=4 blk=0 avail=7075 (60.3%) swpO=0 conn=1 myRSS=1976 php=2 phpRSS=188 ap=38 tcp=55 topuser=infinium 2026-08-13 08:24:51 L1=1.33 run=2 blk=0 avail=7048 (60.1%) swpO=0 conn=3 myRSS=1976 php=2 phpRSS=189 ap=42 tcp=50 topuser=tubesupplies 2026-08-13 08:25:00 L1=1.57 run=2 blk=0 avail=7146 (60.9%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=61 ap=42 tcp=52 topuser=corpkicks 2026-08-13 08:25:01 L1=1.57 run=2 blk=0 avail=6900 (58.8%) swpO=0 conn=3 myRSS=1976 php=2 phpRSS=335 ap=42 tcp=48 topuser=corpkicks 2026-08-13 08:25:10 L1=1.62 run=2 blk=0 avail=7184 (61.3%) swpO=0 conn=1 myRSS=1976 php=1 phpRSS=65 ap=35 tcp=33 topuser=evolution 2026-08-13 08:25:11 L1=1.62 run=4 blk=0 avail=7149 (61.0%) swpO=0 conn=3 myRSS=1976 php=1 phpRSS=66 ap=34 tcp=36 topuser=evolution 2026-08-13 08:25:20 L1=1.52 run=1 blk=0 avail=7257 (61.9%) swpO=0 conn=1 myRSS=1976 php=0 phpRSS=0 ap=30 tcp=35 topuser=- 2026-08-13 08:25:21 L1=1.52 run=2 blk=1 avail=7220 (61.6%) swpO=0 conn=3 myRSS=1976 php=1 phpRSS=65 ap=30 tcp=35 topuser=evolution 2026-08-13 08:25:30 L1=1.44 run=3 blk=0 avail=7133 (60.8%) swpO=0 conn=3 myRSS=1977 php=2 phpRSS=187 ap=26 tcp=41 topuser=evolution 2026-08-13 08:25:31 L1=1.44 run=8 blk=0 avail=7033 (60.0%) swpO=0 conn=3 myRSS=1982 php=10 phpRSS=500 ap=27 tcp=47 topuser=evolution 2026-08-13 08:25:40 L1=1.67 run=36 blk=0 avail=5737 (48.9%) swpO=161 conn=20 myRSS=1982 php=21 phpRSS=2049 ap=41 tcp=66 topuser=olympic 2026-08-13 08:25:41 L1=1.67 run=34 blk=0 avail=5723 (48.8%) swpO=273 conn=16 myRSS=1981 php=17 phpRSS=1796 ap=45 tcp=57 topuser=olympic