INCIDENT 2026-08-14 08:09:09 trigger: php_rss=1702MB ================================================================== load: 2.43 1.80 1.78 13/619 1647156 ncpu:10 mem_avail: 6311MB/11729MB (53.8%) swap_used:1013MB swapout:0/s blocked(D):0 running:20 iowait:0.0% steal:0.0% php: 11 procs / 1702MB heaviest user: madalice (8 procs, 1543MB) apache: 46 procs tcp_estab: 44 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1546 madalice 8 1354 root 234 912 nobody 45 690 netdata 8 263 evolution 6 136 kurri 6 77 cpanellogin 1 69 lowrange 3 38 dovenull 6 27 wp-toolkit 6 21 mailnull 3 18 mailman 20 15 zabbix 1 13 dovecot 3 8 named 1 6 nscd 1 4 cpanelconnecttrack 1 3 polkitd 1 2 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 7 1347 evolution 2 132 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5388 MB Active(file): 4214 MB Inactive(file): 733 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 453 MB CommitLimit: 9960 MB Committed_AS: 8627 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 06:57:52 2848 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1583636 7.3 Ssl 06:30:07 /usr/sbin/mariadbd 1647096 1647070 madalice 267288 76.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1647095 1647069 madalice 264856 73.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1647105 1646387 madalice 264404 111 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 215280 2.5 Ssl 45-21:59:10 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451533 1444234 root 188132 0.0 S 05:32:01 spamd child 1451534 1444234 root 179356 0.0 S 05:32:01 spamd child 1647111 1647109 madalice 176140 78.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1647107 1645405 madalice 172856 83.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1647115 1645409 madalice 148132 122 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1444234 1 root 143732 0.0 Ss 05:46:20 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1647108 1646854 madalice 137156 56.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 123920 0.0 Ss 24-22:22:18 /usr/lib/systemd/systemd-journald 1611528 1353308 cpanellogin 70836 0.0 S 43:29 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1647118 1646269 evolution 68452 17.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1647123 1646274 evolution 67544 14.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42208 0.0 Ss 23-05:27:40 cpsrvd (SSL) - waiting for connections 1469 1 root 42180 0.1 Ss 45-21:59:09 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2223 1201 root 39008 0.0 Sl 45-21:59:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 38260 0.1 Sl 45-21:59:05 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1443709 1 root 30496 0.0 Ss 05:46:55 lfd - sleeping 1643373 1276780 nobody 22512 0.0 S 04:53 /usr/sbin/httpd -k start 1643847 1276780 nobody 21184 0.0 S 04:30 /usr/sbin/httpd -k start 1643723 1276780 nobody 20872 0.0 S 04:37 /usr/sbin/httpd -k start 1644757 1276780 nobody 20364 0.0 S 03:22 /usr/sbin/httpd -k start 1644710 1276780 nobody 20188 0.0 S 03:24 /usr/sbin/httpd -k start 1645908 1276780 nobody 19896 0.0 S 01:54 /usr/sbin/httpd -k start 1645406 1276780 nobody 19800 0.0 S 02:35 /usr/sbin/httpd -k start 1644703 1276780 nobody 19648 0.0 S 03:25 /usr/sbin/httpd -k start 1644743 1276780 nobody 19380 0.0 S 03:22 /usr/sbin/httpd -k start 1645339 1276780 nobody 19260 0.0 S 02:38 /usr/sbin/httpd -k start 1645355 1276780 nobody 18800 0.0 S 02:37 /usr/sbin/httpd -k start 1646269 1276780 nobody 18796 0.0 S 01:26 /usr/sbin/httpd -k start 1645409 1276780 nobody 18744 0.0 S 02:35 /usr/sbin/httpd -k start 1645405 1276780 nobody 18676 0.0 S 02:35 /usr/sbin/httpd -k start 1645401 1276780 nobody 18548 0.0 S 02:35 /usr/sbin/httpd -k start 1646387 1276780 nobody 18404 0.0 S 01:13 /usr/sbin/httpd -k start 1645398 1276780 nobody 18312 0.0 S 02:35 /usr/sbin/httpd -k start 1646260 1276780 nobody 18184 0.0 S 01:27 /usr/sbin/httpd -k start 1646268 1276780 nobody 17596 0.0 S 01:26 /usr/sbin/httpd -k start 1647098 1276780 nobody 17176 0.3 S 00:03 /usr/sbin/httpd -k start 1646051 1276780 nobody 17024 0.0 S 01:45 /usr/sbin/httpd -k start 1646856 1276780 nobody 16948 0.0 S 00:26 /usr/sbin/httpd -k start 1646591 1276780 nobody 16940 0.0 S 00:52 /usr/sbin/httpd -k start 1601939 1471 root 16752 0.0 S 56:10 cPhulkd - dbprocessor 1646274 1276780 nobody 16616 0.0 R 01:25 /usr/sbin/httpd -k start 1646854 1276780 nobody 16360 0.0 S 00:27 /usr/sbin/httpd -k start 1646592 1276780 nobody 16152 0.0 S 00:52 /usr/sbin/httpd -k start 1645354 1276780 nobody 15996 0.0 S 02:37 /usr/sbin/httpd -k start 1646053 1276780 nobody 15836 0.0 S 01:45 /usr/sbin/httpd -k start 1647067 1276780 nobody 15836 0.0 S 00:07 /usr/sbin/httpd -k start 1471 1 root 15616 0.0 Ss 45-21:59:09 cPhulkd - processor 1647068 1276780 nobody 15312 0.1 S 00:07 /usr/sbin/httpd -k start 1647069 1276780 nobody 15144 0.0 S 00:07 /usr/sbin/httpd -k start 1647110 1276780 nobody 15052 0.0 S 00:02 /usr/sbin/httpd -k start 1647070 1276780 nobody 15044 0.0 S 00:07 /usr/sbin/httpd -k start 1647109 1276780 nobody 15012 0.0 S 00:02 /usr/sbin/httpd -k start 1647006 1276780 nobody 14992 0.0 S 00:09 /usr/sbin/httpd -k start 1647019 1276780 nobody 14988 0.0 S 00:08 /usr/sbin/httpd -k start 185104 2431 netdata 14708 2.0 Sl 1-11:35:28 /usr/libexec/netdata/plugins.d/apps.plugin 1 --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+-------------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+-------------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 679634 | root | 108-1481181613 | Prepare | 0 | | SELECT id, staffname, date, notes, `data` FROM log WHERE identifier = '20065' AND module='productionorder' ORDER BY ID DESC limit 100 | | 679631 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 679630 | root | 85-1701079776 | Execute | 0 | Sending data | SELECT quoteitems.*, inventory.code, inventory.supplierCodes, inventory.plugins, inventory.weight, inventory.lockItem, inventory.cost as invcost, inventory.lastpriceupdate, (SELECT costAvgDate from inventory_soh | | 679515 | madalice_wp | madalice_wp | Query | 0 | Creating sort index | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (8811,33647,28292,20717,30757,30681,30743,15842,15423,15904,30626,130,33108,120) ORDER BY meta_id ASC | | 679507 | madalice_wp | madalice_wp | Query | 0 | starting | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (33179) ORDER BY meta_id ASC | +--------+-------------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 316 evolution/portal.evolutionerp.com.au-ssl_log 191 evolution/apps.evolutionerp.com.au-ssl_log 18 madalice/madalice.com.au-ssl_log 12 corpkicks/corporatekicks.com.au-ssl_log 7 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 336 203.54.180.238 85 103.104.165.99 37 180.181.236.49 18 91.239.157.187 11 103.104.164.114 8 165.225.114.195 7 182.239.240.254 6 136.70.81.125 6 116.91.223.103 6 1.145.73.14 4 91.92.47.191 2 207.46.13.111 2 206.83.113.125 2 124.190.136.22 2 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 108 POST /functions.php 75 GET /app/ajax.php 73 GET /factory_session_checker.php 37 GET /heartbeat.php 36 GET /factory_session_processed_qty.php 36 GET /factory_session_joiner.php 33 GET /index.php 19 POST /plugins/csvexporter/plugin.php 11 POST /app/ajax/selectFilterSingle.php 11 POST /app/ajax.php 10 POST /clienteditsave.php 8 POST //functions.php 6 GET //app/ajax.php 5 POST /quoteditsave.php 5 POST /logsave.php 5 GET /plugins/fensa/fensa-ajax.php 4 POST /tasksave.php 3 POST /plugins/fencecosting/plugin.php 3 GET / 2 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 108 POST /functions.php 75 GET /app/ajax.php 29 GET /index.php 19 POST /plugins/csvexporter/plugin.php 11 POST /app/ajax/selectFilterSingle.php 11 POST /app/ajax.php 10 POST /clienteditsave.php 8 POST //functions.php 6 GET //app/ajax.php 5 POST /quoteditsave.php 5 POST /logsave.php 5 GET /plugins/fensa/fensa-ajax.php -- last 10 requests -- 180.181.236.49 - - [14/Aug/2026:08:09:01 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=15206255695 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 180.181.236.49 - - [14/Aug/2026:08:09:01 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dopportunityedit%26opportunityid%3D394&call=getUserSetting&caller=ajaxSubmitLocal&seq=18751780931 HTTP/1.1" 200 203.54.180.238 - - [14/Aug/2026:08:09:01 +1000] "POST /itemModify.php?call=getJobInvBOM HTTP/1.1" 200 1747 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28385&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Wi 180.181.236.49 - - [14/Aug/2026:08:09:01 +1000] "POST /app/ajax.php?call=ts&tsact=tsUpdateTimesheetNominalRates HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=394" "Mozilla/ 103.104.165.99 - - [14/Aug/2026:08:09:01 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21927 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12012" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 180.181.236.49 - - [14/Aug/2026:08:09:01 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dopportunityedit%26opportunityid%3D394&call=getUserSetting&caller=ajaxSubmitLocal&seq=14686972123 HTTP/1.1" 200 168 "https://my.e 103.104.165.99 - - [14/Aug/2026:08:09:01 +1000] "GET /index.php HTTP/1.1" 200 29492 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12012&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 103.104.165.99 - - [14/Aug/2026:08:09:02 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 180.181.236.49 - - [14/Aug/2026:08:09:02 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr 103.104.165.99 - - [14/Aug/2026:08:09:02 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11198" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 73 GET /factory_session_checker.php 37 GET /heartbeat.php 36 GET /factory_session_processed_qty.php 36 GET /factory_session_joiner.php 4 GET /index.php 2 POST /portal/register 2 POST /factory_functions.php 1 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:08:08:58 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:08:08:59 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:08:08:59 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 128 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:08:08:59 +1000] "GET /factory_session_joiner.php?id=34542 HTTP/1.1" 200 94 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:08:09:00 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:08:09:00 +1000] "GET /factory_session_joiner.php?id=34589 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:08:08:59 +1000] "GET /heartbeat.php?sentAt=1786658940&bytes=106,126,64,124&_=1786658380084 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [14/Aug/2026:08:09:00 +1000] "GET /heartbeat.php?sentAt=1786658940&bytes=106,126,64,124&_=1786602373002 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:08:09:02 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:08:09:03 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == evolution/apps.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET / 1 GET //xmlrpc.php 1 GET //wp/wp-includes/wlwmanifest.xml 1 GET //wp-includes/wlwmanifest.xml 1 GET //wp2/wp-includes/wlwmanifest.xml 1 GET //wp1/wp-includes/wlwmanifest.xml 1 GET //wordpress/wp-includes/wlwmanifest.xml 1 GET //web/wp-includes/wlwmanifest.xml 1 GET //website/wp-includes/wlwmanifest.xml 1 GET //test/wp-includes/wlwmanifest.xml 1 GET //site/wp-includes/wlwmanifest.xml 1 GET //shop/wp-includes/wlwmanifest.xml -- last 10 requests -- 91.239.157.187 - - [14/Aug/2026:08:07:55 +1000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537. 91.239.157.187 - - [14/Aug/2026:08:07:56 +1000] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 91.239.157.187 - - [14/Aug/2026:08:07:56 +1000] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 91.239.157.187 - - [14/Aug/2026:08:07:56 +1000] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 91.239.157.187 - - [14/Aug/2026:08:07:57 +1000] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 91.239.157.187 - - [14/Aug/2026:08:07:57 +1000] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537 91.239.157.187 - - [14/Aug/2026:08:07:57 +1000] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 91.239.157.187 - - [14/Aug/2026:08:07:57 +1000] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/5 91.239.157.187 - - [14/Aug/2026:08:07:58 +1000] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537 91.239.157.187 - - [14/Aug/2026:08:07:58 +1000] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 --- last 30 samples (run-up to this incident) --- 2026-08-14 08:06:38 L1=3.95 run=24 blk=0 avail=6652 (56.7%) swpO=0 conn=1 myRSS=1543 php=15 phpRSS=1269 ap=72 tcp=73 topuser=olympic 2026-08-14 08:06:48 L1=3.87 run=3 blk=0 avail=7464 (63.6%) swpO=0 conn=1 myRSS=1543 php=2 phpRSS=103 ap=64 tcp=35 topuser=evolution 2026-08-14 08:06:48 L1=3.64 run=3 blk=0 avail=7456 (63.6%) swpO=0 conn=1 myRSS=1543 php=4 phpRSS=174 ap=63 tcp=35 topuser=evolution 2026-08-14 08:06:58 L1=3.35 run=2 blk=0 avail=7577 (64.6%) swpO=0 conn=1 myRSS=1543 php=0 phpRSS=0 ap=54 tcp=28 topuser=- 2026-08-14 08:06:58 L1=3.08 run=2 blk=0 avail=7578 (64.6%) swpO=0 conn=1 myRSS=1543 php=1 phpRSS=23 ap=53 tcp=28 topuser=evolution 2026-08-14 08:07:08 L1=2.83 run=3 blk=0 avail=7480 (63.8%) swpO=0 conn=1 myRSS=1543 php=2 phpRSS=211 ap=44 tcp=37 topuser=corpkicks 2026-08-14 08:07:08 L1=2.69 run=2 blk=0 avail=7415 (63.2%) swpO=0 conn=2 myRSS=1543 php=3 phpRSS=297 ap=43 tcp=41 topuser=corpkicks 2026-08-14 08:07:18 L1=2.55 run=3 blk=0 avail=7534 (64.2%) swpO=0 conn=3 myRSS=1546 php=2 phpRSS=153 ap=47 tcp=41 topuser=aaa 2026-08-14 08:07:19 L1=2.59 run=3 blk=0 avail=7494 (63.9%) swpO=0 conn=2 myRSS=1546 php=3 phpRSS=223 ap=47 tcp=44 topuser=aaa 2026-08-14 08:07:28 L1=2.54 run=2 blk=0 avail=7509 (64.0%) swpO=0 conn=3 myRSS=1546 php=4 phpRSS=190 ap=51 tcp=46 topuser=evolution 2026-08-14 08:07:29 L1=2.50 run=6 blk=0 avail=7490 (63.9%) swpO=0 conn=2 myRSS=1546 php=6 phpRSS=273 ap=51 tcp=47 topuser=evolution 2026-08-14 08:07:38 L1=2.30 run=1 blk=0 avail=7662 (65.3%) swpO=0 conn=3 myRSS=1546 php=0 phpRSS=0 ap=42 tcp=41 topuser=- 2026-08-14 08:07:39 L1=2.11 run=2 blk=0 avail=7581 (64.6%) swpO=0 conn=2 myRSS=1546 php=1 phpRSS=121 ap=41 tcp=44 topuser=corpkicks 2026-08-14 08:07:48 L1=2.02 run=1 blk=0 avail=7653 (65.3%) swpO=0 conn=3 myRSS=1546 php=0 phpRSS=0 ap=44 tcp=31 topuser=- 2026-08-14 08:07:49 L1=1.86 run=2 blk=0 avail=7624 (65.0%) swpO=0 conn=2 myRSS=1546 php=1 phpRSS=66 ap=43 tcp=35 topuser=evolution 2026-08-14 08:07:58 L1=1.81 run=3 blk=0 avail=7426 (63.3%) swpO=0 conn=3 myRSS=1546 php=2 phpRSS=296 ap=41 tcp=38 topuser=corpkicks 2026-08-14 08:07:59 L1=1.81 run=2 blk=0 avail=7625 (65.0%) swpO=0 conn=2 myRSS=1546 php=1 phpRSS=66 ap=41 tcp=39 topuser=evolution 2026-08-14 08:08:08 L1=1.53 run=1 blk=0 avail=7709 (65.7%) swpO=0 conn=3 myRSS=1546 php=0 phpRSS=0 ap=36 tcp=30 topuser=- 2026-08-14 08:08:09 L1=1.53 run=2 blk=0 avail=7708 (65.7%) swpO=0 conn=1 myRSS=1546 php=1 phpRSS=39 ap=35 tcp=30 topuser=evolution 2026-08-14 08:08:18 L1=1.52 run=2 blk=0 avail=7653 (65.2%) swpO=0 conn=2 myRSS=1546 php=1 phpRSS=87 ap=35 tcp=34 topuser=otterfencing 2026-08-14 08:08:19 L1=1.52 run=2 blk=0 avail=7613 (64.9%) swpO=0 conn=1 myRSS=1546 php=1 phpRSS=132 ap=35 tcp=36 topuser=otterfencing 2026-08-14 08:08:28 L1=1.44 run=1 blk=0 avail=7740 (66.0%) swpO=0 conn=2 myRSS=1546 php=0 phpRSS=0 ap=30 tcp=34 topuser=- 2026-08-14 08:08:29 L1=1.44 run=1 blk=0 avail=7740 (66.0%) swpO=0 conn=1 myRSS=1546 php=1 phpRSS=34 ap=30 tcp=35 topuser=evolution 2026-08-14 08:08:38 L1=1.29 run=3 blk=0 avail=7781 (66.3%) swpO=0 conn=2 myRSS=1546 php=1 phpRSS=43 ap=30 tcp=33 topuser=evolution 2026-08-14 08:08:39 L1=1.29 run=1 blk=0 avail=7787 (66.4%) swpO=0 conn=1 myRSS=1546 php=0 phpRSS=0 ap=30 tcp=33 topuser=- 2026-08-14 08:08:48 L1=1.09 run=1 blk=0 avail=7765 (66.2%) swpO=0 conn=2 myRSS=1546 php=0 phpRSS=0 ap=33 tcp=33 topuser=- 2026-08-14 08:08:49 L1=1.09 run=1 blk=0 avail=7774 (66.3%) swpO=0 conn=1 myRSS=1546 php=0 phpRSS=0 ap=33 tcp=32 topuser=- 2026-08-14 08:08:59 L1=1.08 run=2 blk=0 avail=7734 (65.9%) swpO=0 conn=2 myRSS=1546 php=1 phpRSS=66 ap=32 tcp=34 topuser=evolution 2026-08-14 08:08:59 L1=1.08 run=5 blk=0 avail=7676 (65.4%) swpO=0 conn=1 myRSS=1546 php=4 phpRSS=223 ap=32 tcp=37 topuser=evolution 2026-08-14 08:09:09 L1=2.43 run=20 blk=0 avail=6311 (53.8%) swpO=0 conn=11 myRSS=1546 php=11 phpRSS=1702 ap=46 tcp=44 topuser=madalice