INCIDENT 2026-08-13 09:01:43 trigger: php_rss=1663MB ================================================================== load: 2.85 2.27 1.83 9/647 645708 ncpu:10 mem_avail: 5624MB/11729MB (48.0%) swap_used:1039MB swapout:0/s blocked(D):0 running:14 iowait:0.2% steal:0.0% php: 14 procs / 1663MB heaviest user: corpkicks (6 procs, 1321MB) apache: 64 procs tcp_estab: 64 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2100 corpkicks 6 1357 nobody 63 1062 root 239 794 evolution 12 347 netdata 8 257 cpanellogin 1 47 kurri 3 36 aaa 3 36 mailman 20 30 dovenull 6 27 wp-toolkit 6 22 zabbix 1 17 lowrange 1 9 dovecot 3 9 named 1 7 nscd 1 3 dbus 1 3 cpanelconnecttrack 1 3 polkitd 1 2 --- php workers by user --- USER PROCS RSS_MB corpkicks 6 1369 evolution 8 342 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4970 MB Active(file): 4345 MB Inactive(file): 845 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 416 MB CommitLimit: 9960 MB Committed_AS: 9720 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 07:50:26 3192 /usr/bin/imunify-agent-proxy 644174 root 01:42 3060 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 2150660 7.4 Ssl 12:28:11 /usr/sbin/mariadbd 645646 645042 corpkicks 240148 123 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 645649 644084 corpkicks 228668 109 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 645648 644504 corpkicks 226416 110 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 645647 645297 corpkicks 223816 110 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1220 1 netdata 206432 2.5 Ssl 44-22:51:44 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 388651 382990 root 188124 0.0 S 06:27:44 spamd child 388652 382990 root 162684 0.0 S 06:27:44 spamd child 382990 1 root 147664 0.0 Ss 06:38:56 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 645638 645227 corpkicks 88504 139 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 645464 643771 evolution 69084 1.2 S 00:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 624996 1353308 cpanellogin 48320 0.0 S 24:54 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 645679 640611 evolution 43696 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 159820 1 root 42908 0.0 Ss 23-23:14:52 /usr/lib/systemd/systemd-journald 1469 1 root 41932 0.1 Ss 44-22:51:43 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41916 0.0 Ss 22-06:20:14 cpsrvd (SSL) - waiting for connections 2223 1201 root 41488 0.0 Sl 44-22:51:43 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 645571 638285 evolution 40548 0.3 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 645569 645041 evolution 39996 0.3 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 645629 644532 evolution 39452 1.5 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 645626 645170 evolution 39436 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 645627 643780 evolution 39376 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 645489 645022 evolution 39104 0.2 S 00:11 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 36856 0.1 Sl 44-22:51:39 /usr/libexec/netdata/plugins.d/go.d.plugin 1 382254 1 root 29976 0.0 Ss 06:39:30 lfd - sleeping 635024 1276780 nobody 23408 0.0 S 12:30 /usr/sbin/httpd -k start 645741 641638 evolution 23156 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 638285 1276780 nobody 22960 0.0 S 08:06 /usr/sbin/httpd -k start 645742 645583 evolution 22852 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 643348 1276780 nobody 21384 0.1 S 02:47 /usr/sbin/httpd -k start 643632 1276780 nobody 21320 0.1 S 02:27 /usr/sbin/httpd -k start 645297 1276780 nobody 21192 1.1 S 00:30 /usr/sbin/httpd -k start 644536 1276780 nobody 21084 0.1 S 01:28 /usr/sbin/httpd -k start 644504 1276780 nobody 20996 0.4 S 01:30 /usr/sbin/httpd -k start 640611 1276780 nobody 20804 0.0 S 05:36 /usr/sbin/httpd -k start 644533 1276780 nobody 20760 0.0 S 01:28 /usr/sbin/httpd -k start 644084 1276780 nobody 20620 0.1 S 01:51 /usr/sbin/httpd -k start 641214 1276780 nobody 20512 0.0 S 04:48 /usr/sbin/httpd -k start 643771 1276780 nobody 20320 0.0 S 02:16 /usr/sbin/httpd -k start 645042 1276780 nobody 20284 0.4 S 00:46 /usr/sbin/httpd -k start 645227 1276780 nobody 20224 0.3 S 00:32 /usr/sbin/httpd -k start 644046 1276780 nobody 20140 0.0 S 01:52 /usr/sbin/httpd -k start 643373 1276780 nobody 20136 0.0 S 02:45 /usr/sbin/httpd -k start 644535 1276780 nobody 19992 0.1 S 01:28 /usr/sbin/httpd -k start 645320 1276780 nobody 19920 0.1 S 00:29 /usr/sbin/httpd -k start 644521 1276780 nobody 19704 0.0 S 01:29 /usr/sbin/httpd -k start 642196 1276780 nobody 19680 0.0 S 03:50 /usr/sbin/httpd -k start 643781 1276780 nobody 19504 0.0 S 02:15 /usr/sbin/httpd -k start 641638 1276780 nobody 19216 0.0 S 04:21 /usr/sbin/httpd -k start 645316 1276780 nobody 18908 0.1 S 00:29 /usr/sbin/httpd -k start 644529 1276780 nobody 18884 0.0 S 01:28 /usr/sbin/httpd -k start 645040 1276780 nobody 18632 0.2 S 00:46 /usr/sbin/httpd -k start 643613 1276780 nobody 18608 0.0 S 02:29 /usr/sbin/httpd -k start 645030 1276780 nobody 18560 0.1 S 00:47 /usr/sbin/httpd -k start 645515 1276780 nobody 18328 0.0 S 00:11 /usr/sbin/httpd -k start 645170 1276780 nobody 18244 0.0 S 00:40 /usr/sbin/httpd -k start 645264 1276780 nobody 18212 0.0 S 00:31 /usr/sbin/httpd -k start 185104 2431 netdata 18192 1.9 Sl 12:28:02 /usr/libexec/netdata/plugins.d/apps.plugin 1 644518 1276780 nobody 17964 0.0 S 01:29 /usr/sbin/httpd -k start 645294 1276780 nobody 17892 0.0 S 00:30 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1166720 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 695 evolution/portal.evolutionerp.com.au-ssl_log 126 infinium/infinium.net.au-ssl_log 29 corpkicks/corporatekicks.com.au-ssl_log 22 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 447 203.54.180.238 119 103.104.165.99 58 103.104.164.114 49 49.199.77.199 46 1.145.84.81 40 180.181.236.49 39 150.228.163.151 13 118.127.40.55 12 120.19.185.209 5 54.175.74.27 5 129.121.123.168 4 184.72.121.156 4 182.239.240.254 3 54.209.60.63 3 195.178.110.103 --- top request paths across all vhosts (last 3 min) --- 281 POST /functions.php 132 GET /app/ajax.php 81 GET /index.php 39 GET /heartbeat.php 37 POST /plugins/csvexporter/plugin.php 35 GET /factory_session_checker.php 29 POST /quoteditsave.php 28 POST /app/ajax.php 27 POST /app/ajax/selectFilter.php 22 POST /app/ajax/selectFilterSingle.php 17 GET /factory_session_joiner.php 16 GET /factory_session_processed_qty.php 11 POST /clienteditsave.php 10 POST /wp-login.php 9 GET /wp-login.php 8 POST /itemModify.php 8 GET /plugins/fensa/fensa-ajax.php 6 POST /wp-cron.php 6 POST /plugins/fencecosting/plugin.php 5 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 281 POST /functions.php 132 GET /app/ajax.php 73 GET /index.php 37 POST /plugins/csvexporter/plugin.php 29 POST /quoteditsave.php 28 POST /app/ajax.php 27 POST /app/ajax/selectFilter.php 22 POST /app/ajax/selectFilterSingle.php 11 POST /clienteditsave.php 8 POST /itemModify.php 8 GET /plugins/fensa/fensa-ajax.php 6 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:09:01:41 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:09:01:41 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=33690" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 180.181.236.49 - - [13/Aug/2026:09:01:41 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory&date=06-08-2026&=1786456800&=1&=on" "Mozilla/5.0 (Wind 203.54.180.238 - - [13/Aug/2026:09:01:41 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 974 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8465" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [13/Aug/2026:09:01:41 +1000] "POST /app/ajax/selectFilter.php?call=filterstaffandcontractors&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%201000&excludelabour=1&include=156&clientid=10000&contac 203.54.180.238 - - [13/Aug/2026:09:01:42 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29252" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 203.54.180.238 - - [13/Aug/2026:09:01:42 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 145447 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8465" "Mozilla/5.0 (Windows NT 10.0 103.104.165.99 - - [13/Aug/2026:09:01:42 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 3913 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36666§ionid=all" "Mozilla/5.0 (Windows NT 10.0 103.104.165.99 - - [13/Aug/2026:09:01:42 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36666§ionid=all" "Mozilla/5.0 (Windows NT 10.0; W 203.54.180.238 - - [13/Aug/2026:09:01:43 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=33690" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 39 GET /heartbeat.php 35 GET /factory_session_checker.php 17 GET /factory_session_joiner.php 16 GET /factory_session_processed_qty.php 8 GET /index.php 4 POST /portal/register 4 POST /factory_functions.php 2 GET /wp-json/gravitysmtp/v1/tests/mock-data 1 GET / -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:09:01:21 +1000] "GET /heartbeat.php?sentAt=1786575682&bytes=106,124,251,66&_=1786532342619 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:09:01:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:09:01:27 +1000] "GET /heartbeat.php?sentAt=1786575688&bytes=106,124,251,72&_=1786570514919 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:09:01:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:09:01:31 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [13/Aug/2026:09:01:31 +1000] "GET /factory_session_joiner.php?id=34553 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [13/Aug/2026:09:01:31 +1000] "GET /heartbeat.php?sentAt=1786575692&bytes=106,124,251,76&_=1786532342620 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:09:01:34 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:09:01:37 +1000] "GET /heartbeat.php?sentAt=1786575698&bytes=106,124,251,82&_=1786570514920 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:09:01:39 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == infinium/infinium.net.au-ssl_log == -- top paths -- 10 POST /wp-login.php 9 GET /wp-login.php 4 POST / 4 GET /wp-json/wp/v2/users/me 2 POST /wp-cron.php -- last 10 requests -- 129.121.123.168 - - [13/Aug/2026:08:59:41 +1000] "GET /wp-login.php HTTP/1.1" 200 1706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 129.121.123.168 - - [13/Aug/2026:08:59:43 +1000] "POST /wp-login.php HTTP/1.1" 503 6746 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133. 162.240.102.228 - - [13/Aug/2026:08:59:47 +1000] "GET /wp-login.php HTTP/1.1" 200 1706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 129.121.123.168 - - [13/Aug/2026:08:59:48 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.240.102.228 - - [13/Aug/2026:08:59:48 +1000] "POST /wp-login.php HTTP/1.1" 503 6746 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133. 205.134.255.185 - - [13/Aug/2026:08:59:55 +1000] "GET /wp-login.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 205.134.255.185 - - [13/Aug/2026:08:59:56 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133. 195.154.246.214 - - [13/Aug/2026:08:59:58 +1000] "GET /wp-login.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 195.154.246.214 - - [13/Aug/2026:08:59:59 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://mail.infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome 115.146.125.52 - - [13/Aug/2026:09:00:35 +1000] "GET /wp-login.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-13 08:59:22 L1=2.40 run=3 blk=0 avail=6924 (59.0%) swpO=0 conn=3 myRSS=2100 php=3 phpRSS=238 ap=43 tcp=47 topuser=madalice 2026-08-13 08:59:22 L1=2.37 run=4 blk=0 avail=6884 (58.7%) swpO=0 conn=4 myRSS=2100 php=3 phpRSS=279 ap=43 tcp=48 topuser=madalice 2026-08-13 08:59:32 L1=2.18 run=3 blk=0 avail=6916 (59.0%) swpO=0 conn=3 myRSS=2100 php=4 phpRSS=239 ap=49 tcp=43 topuser=infinium 2026-08-13 08:59:32 L1=2.32 run=3 blk=0 avail=6888 (58.7%) swpO=0 conn=4 myRSS=2100 php=4 phpRSS=266 ap=49 tcp=44 topuser=evolution 2026-08-13 08:59:42 L1=2.46 run=3 blk=0 avail=6967 (59.4%) swpO=0 conn=3 myRSS=2100 php=4 phpRSS=255 ap=39 tcp=46 topuser=infinium 2026-08-13 08:59:42 L1=2.42 run=4 blk=0 avail=6977 (59.5%) swpO=0 conn=4 myRSS=2100 php=3 phpRSS=218 ap=38 tcp=40 topuser=infinium 2026-08-13 08:59:52 L1=2.31 run=2 blk=0 avail=6970 (59.4%) swpO=0 conn=3 myRSS=2100 php=2 phpRSS=189 ap=38 tcp=45 topuser=madalice 2026-08-13 08:59:52 L1=2.20 run=2 blk=0 avail=6918 (59.0%) swpO=0 conn=4 myRSS=2100 php=2 phpRSS=229 ap=40 tcp=45 topuser=madalice 2026-08-13 09:00:02 L1=2.19 run=3 blk=0 avail=6959 (59.3%) swpO=0 conn=3 myRSS=2100 php=3 phpRSS=159 ap=42 tcp=44 topuser=evolution 2026-08-13 09:00:02 L1=2.17 run=3 blk=0 avail=6967 (59.4%) swpO=0 conn=4 myRSS=2100 php=3 phpRSS=160 ap=42 tcp=42 topuser=evolution 2026-08-13 09:00:12 L1=2.08 run=3 blk=0 avail=6940 (59.2%) swpO=0 conn=3 myRSS=2100 php=4 phpRSS=273 ap=38 tcp=47 topuser=evolution 2026-08-13 09:00:12 L1=2.15 run=2 blk=0 avail=6961 (59.4%) swpO=0 conn=4 myRSS=2100 php=4 phpRSS=243 ap=39 tcp=50 topuser=evolution 2026-08-13 09:00:22 L1=2.30 run=5 blk=0 avail=6791 (57.9%) swpO=0 conn=3 myRSS=2100 php=4 phpRSS=336 ap=51 tcp=48 topuser=madalice 2026-08-13 09:00:22 L1=2.27 run=4 blk=0 avail=6729 (57.4%) swpO=0 conn=4 myRSS=2100 php=4 phpRSS=403 ap=51 tcp=47 topuser=madalice 2026-08-13 09:00:32 L1=2.09 run=1 blk=0 avail=6776 (57.8%) swpO=0 conn=3 myRSS=2100 php=2 phpRSS=301 ap=49 tcp=49 topuser=corpkicks 2026-08-13 09:00:32 L1=2.00 run=2 blk=0 avail=6772 (57.7%) swpO=0 conn=4 myRSS=2100 php=2 phpRSS=309 ap=49 tcp=47 topuser=corpkicks 2026-08-13 09:00:42 L1=1.85 run=2 blk=0 avail=6863 (58.5%) swpO=0 conn=3 myRSS=2100 php=2 phpRSS=265 ap=41 tcp=47 topuser=corpkicks 2026-08-13 09:00:42 L1=1.85 run=1 blk=0 avail=6824 (58.2%) swpO=0 conn=3 myRSS=2100 php=2 phpRSS=301 ap=41 tcp=47 topuser=corpkicks 2026-08-13 09:00:52 L1=1.94 run=2 blk=0 avail=7007 (59.7%) swpO=0 conn=3 myRSS=2100 php=2 phpRSS=138 ap=39 tcp=38 topuser=madalice 2026-08-13 09:00:52 L1=1.94 run=2 blk=0 avail=6974 (59.5%) swpO=0 conn=3 myRSS=2100 php=2 phpRSS=171 ap=38 tcp=36 topuser=madalice 2026-08-13 09:01:02 L1=2.04 run=4 blk=0 avail=6815 (58.1%) swpO=0 conn=3 myRSS=2100 php=7 phpRSS=429 ap=43 tcp=59 topuser=evolution 2026-08-13 09:01:02 L1=2.04 run=3 blk=0 avail=6795 (57.9%) swpO=0 conn=3 myRSS=2100 php=6 phpRSS=399 ap=44 tcp=59 topuser=evolution 2026-08-13 09:01:12 L1=2.35 run=3 blk=0 avail=7010 (59.8%) swpO=0 conn=3 myRSS=2100 php=1 phpRSS=33 ap=47 tcp=61 topuser=evolution 2026-08-13 09:01:13 L1=2.35 run=1 blk=0 avail=6997 (59.7%) swpO=0 conn=3 myRSS=2100 php=1 phpRSS=39 ap=49 tcp=60 topuser=evolution 2026-08-13 09:01:22 L1=2.14 run=2 blk=0 avail=6857 (58.5%) swpO=0 conn=3 myRSS=2100 php=7 phpRSS=300 ap=56 tcp=45 topuser=evolution 2026-08-13 09:01:23 L1=2.14 run=2 blk=0 avail=6877 (58.6%) swpO=0 conn=3 myRSS=2100 php=6 phpRSS=261 ap=55 tcp=44 topuser=evolution 2026-08-13 09:01:32 L1=2.35 run=3 blk=0 avail=6828 (58.2%) swpO=0 conn=3 myRSS=2100 php=8 phpRSS=414 ap=48 tcp=56 topuser=evolution 2026-08-13 09:01:33 L1=2.35 run=3 blk=0 avail=6773 (57.7%) swpO=0 conn=3 myRSS=2100 php=7 phpRSS=437 ap=49 tcp=51 topuser=evolution 2026-08-13 09:01:42 L1=2.85 run=13 blk=0 avail=5950 (50.7%) swpO=0 conn=3 myRSS=2100 php=15 phpRSS=1380 ap=64 tcp=69 topuser=corpkicks 2026-08-13 09:01:43 L1=2.85 run=14 blk=0 avail=5624 (48.0%) swpO=0 conn=10 myRSS=2100 php=14 phpRSS=1663 ap=64 tcp=64 topuser=corpkicks