INCIDENT 2026-08-14 09:18:20 trigger: php_rss=2225MB ================================================================== load: 4.15 2.22 1.88 18/627 1701497 ncpu:10 mem_avail: 5763MB/11729MB (49.1%) swap_used:1033MB swapout:317/s blocked(D):0 running:20 iowait:0.1% steal:0.0% php: 17 procs / 2225MB heaviest user: madalice (11 procs, 1970MB) apache: 43 procs tcp_estab: 47 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 11 2104 mysql 1 1781 root 235 969 nobody 42 716 netdata 8 261 evolution 9 230 aaa 2 119 kurri 4 49 cpanellogin 1 46 alison 3 39 dovenull 6 26 wp-toolkit 6 21 mailnull 3 15 mailman 20 15 zabbix 1 13 corpkicks 1 12 dovecot 3 8 named 1 6 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 11 2137 evolution 5 226 aaa 2 130 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5990 MB Active(file): 4262 MB Inactive(file): 692 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 392 MB CommitLimit: 9960 MB Committed_AS: 9996 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 08:07:04 2848 /usr/bin/imunify-agent-proxy 1698140 root 04:31 61060 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1823872 10.3 Ssl 07:39:19 /usr/sbin/mariadbd 1701429 1700672 madalice 262984 47.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701428 1700809 madalice 251124 44.8 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701427 1700428 madalice 245656 44.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701422 1701303 madalice 245192 50.6 S 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701430 1700673 madalice 230524 42.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701425 1700923 madalice 221340 43.0 S 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 215132 2.5 Ssl 45-23:08:22 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1701434 1699902 madalice 205684 49.0 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701424 1700361 madalice 192720 37.6 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451533 1444234 root 188060 0.0 S 06:41:13 spamd child 1701453 1699897 madalice 185080 90.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 178228 0.0 S 06:41:13 spamd child 1701440 1700121 madalice 170644 40.5 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 145960 0.0 Ss 24-23:31:30 /usr/lib/systemd/systemd-journald 1444234 1 root 132084 0.0 Ss 06:55:32 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1701463 1699885 aaa 83824 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1701464 1699900 evolution 67152 14.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1701461 1700875 madalice 65536 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1698140 1 root 61060 0.5 Ssl 04:31 /opt/imunify360/venv/bin/python3 -m imav.run 1701462 1700106 aaa 60880 25.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1689515 1353308 cpanellogin 47736 0.0 S 15:23 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1701454 1700972 evolution 44452 3.5 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42252 0.0 Ss 23-06:36:52 cpsrvd (SSL) - waiting for connections 1469 1 root 41712 0.1 Ss 45-23:08:21 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1701465 1700914 evolution 40880 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 39480 0.0 Sl 45-23:08:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1701478 1700682 evolution 39444 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 35776 0.1 Sl 45-23:08:17 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1443709 1 root 30180 0.0 Ss 06:56:07 lfd - sleeping 1696995 1276780 nobody 22560 0.2 S 06:14 /usr/sbin/httpd -k start 1698092 1276780 nobody 22304 0.0 S 04:34 /usr/sbin/httpd -k start 1696996 1276780 nobody 21472 0.0 S 06:14 /usr/sbin/httpd -k start 1700395 1276780 nobody 20972 0.1 S 01:30 /usr/sbin/httpd -k start 1699887 1276780 nobody 20776 0.0 S 02:19 /usr/sbin/httpd -k start 1700665 1276780 nobody 20416 0.3 S 01:08 /usr/sbin/httpd -k start 1699885 1276780 nobody 20316 0.0 S 02:19 /usr/sbin/httpd -k start 1700121 1276780 nobody 20200 0.1 S 01:56 /usr/sbin/httpd -k start 1700672 1276780 nobody 19904 0.0 S 01:07 /usr/sbin/httpd -k start 1700681 1276780 nobody 19760 0.1 S 01:06 /usr/sbin/httpd -k start 1699897 1276780 nobody 19428 0.0 S 02:18 /usr/sbin/httpd -k start 1700875 1276780 nobody 19276 0.0 S 00:50 /usr/sbin/httpd -k start 1699900 1276780 nobody 19136 0.0 S 02:18 /usr/sbin/httpd -k start 1700914 1276780 nobody 19048 0.1 S 00:49 /usr/sbin/httpd -k start 1700682 1276780 nobody 18980 0.1 S 01:06 /usr/sbin/httpd -k start 1700972 1276780 nobody 18904 0.1 S 00:42 /usr/sbin/httpd -k start 1699902 1276780 nobody 18820 0.0 S 02:18 /usr/sbin/httpd -k start 1700671 1276780 nobody 18720 0.1 S 01:07 /usr/sbin/httpd -k start 1700810 1276780 nobody 18708 0.0 S 00:56 /usr/sbin/httpd -k start 1700687 1276780 nobody 18480 0.0 S 01:06 /usr/sbin/httpd -k start 1700809 1276780 nobody 18356 0.0 S 00:56 /usr/sbin/httpd -k start 1700428 1276780 nobody 18084 0.0 S 01:29 /usr/sbin/httpd -k start 1700362 1276780 nobody 17888 0.0 S 01:31 /usr/sbin/httpd -k start 1700106 1276780 nobody 17784 0.0 S 01:57 /usr/sbin/httpd -k start 1700392 1276780 nobody 17736 0.0 S 01:30 /usr/sbin/httpd -k start 1701336 1276780 nobody 17488 0.1 S 00:12 /usr/sbin/httpd -k start 1701329 1276780 nobody 17484 0.3 S 00:13 /usr/sbin/httpd -k start 1700393 1276780 nobody 17376 0.0 S 01:30 /usr/sbin/httpd -k start 1471 1 root 16872 0.0 Ss 45-23:08:21 cPhulkd - processor 1700923 1276780 nobody 16672 0.0 S 00:48 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1169460 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 1169298 | madalice_wp | madalice_wp | Query | 0 | starting | SELECT * FROM AMuqf6qZ_posts WHERE ID = 3744 LIMIT 1 | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 419 evolution/portal.evolutionerp.com.au-ssl_log 148 madalice/madalice.com.au-ssl_log 26 customc/customcentral.com.au-ssl_log 11 corpkicks/corporatekicks.com.au-ssl_log 8 aaa/aaadownunder.com.au-ssl_log 6 infinium/infinium.net.au 3 infinium/infinium.net.au-ssl_log 3 tubesupplies/tubesupplies.com.au-ssl_log 3 alison/alisonarts.com.au-ssl_log 2 olympic/olympicfencing.com.au-ssl_log 2 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 388 203.54.180.238 50 116.91.223.103 46 150.228.151.9 30 103.104.165.99 16 136.70.81.125 11 20.100.177.66 11 1.145.117.8 11 103.104.164.114 6 182.239.240.254 6 180.181.236.49 6 118.127.40.55 5 4.232.93.83 5 1.145.84.81 5 1.145.73.14 4 157.55.39.57 --- top request paths across all vhosts (last 3 min) --- 186 POST /functions.php 70 GET /app/ajax.php 54 GET /factory_session_checker.php 45 GET /index.php 30 POST /plugins/csvexporter/plugin.php 28 GET /heartbeat.php 28 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 12 POST /clienteditsave.php 12 POST /app/ajax/selectFilterSingle.php 12 POST /app/ajax.php 11 POST /app/ajax/selectFilter.php 11 GET /autodiscover/autodiscover.xml 9 POST /quoteditsave.php 8 GET /plugins/fensa/fensa-ajax.php 6 POST /wp-cron.php 6 POST /inveditsave.php 4 POST //functions.php 3 POST /portal/register 3 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 186 POST /functions.php 70 GET /app/ajax.php 41 GET /index.php 30 POST /plugins/csvexporter/plugin.php 12 POST /clienteditsave.php 12 POST /app/ajax/selectFilterSingle.php 12 POST /app/ajax.php 11 POST /app/ajax/selectFilter.php 9 POST /quoteditsave.php 8 GET /plugins/fensa/fensa-ajax.php 6 POST /inveditsave.php 4 POST //functions.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:09:18:11 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=76529" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 150.228.151.9 - - [14/Aug/2026:09:18:11 +1000] "POST /quoteditsave.php HTTP/1.1" 302 33 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78392" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 165.225.233.109 - - [14/Aug/2026:09:18:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=14153" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 203.54.180.238 - - [14/Aug/2026:09:18:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29167" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 150.228.151.9 - - [14/Aug/2026:09:18:12 +1000] "GET /index.php?page=quotedit"eid=78393 HTTP/1.1" 200 195345 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78392" "Mozilla/5.0 (Windows NT 10.0; Win64; 150.228.151.9 - - [14/Aug/2026:09:18:16 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78393" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 150.228.151.9 - - [14/Aug/2026:09:18:16 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=load_fensa_modal HTTP/1.1" 200 357 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78393" "Mozilla/5.0 (Wind 150.228.151.9 - - [14/Aug/2026:09:18:16 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=11949946924 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index. 150.228.151.9 - - [14/Aug/2026:09:18:16 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10492064430 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/index 150.228.151.9 - - [14/Aug/2026:09:18:16 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dquotedit%26quoteid%3D78393&call=getUserSetting&caller=ajaxSubmitLocal&seq=19540480212 HTTP/1.1" 200 113 "https: == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 54 GET /factory_session_checker.php 28 GET /heartbeat.php 28 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 4 GET /index.php 3 POST /portal/register 1 POST /inventory.php 1 GET /uploadsave.php 1 GET / -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:09:18:10 +1000] "GET /heartbeat.php?sentAt=1786663090&bytes=106,126,80,178&_=1786602373417 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:09:18:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:09:18:15 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:09:18:16 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:09:18:17 +1000] "GET /factory_session_joiner.php?id=34595 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:09:18:17 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:09:18:17 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 130 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:09:18:18 +1000] "GET /factory_session_joiner.php?id=34552 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:09:18:17 +1000] "GET /heartbeat.php?sentAt=1786663097&bytes=106,126,80,185&_=1786661747112 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=5" 1.145.117.8 - - [14/Aug/2026:09:18:19 +1000] "GET /index.php?page=delivery_commit&id=16269 HTTP/1.1" 200 21836 "https://portal.evolutionerp.com.au/index.php?page=delivery_calendar" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_ == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/design-your-own-kicks-premium/ 2 POST / 2 GET / 1 POST /graphql 1 GET /z9x8c7v6b5-debug-trigger-madalice.com.au 1 GET /terraform.tfstate 1 GET /.svn/entries 1 GET /store/white-classic-clogs-unisex 1 GET /store/veja-custom-swarovskius9/ 1 GET /store/design-your-own-sports-team-sneakers/ 1 GET /secrets.yml 1 GET /.s3cfg -- last 10 requests -- 136.70.81.125 - - [14/Aug/2026:09:18:16 +1000] "GET /.aws/config HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:16 +1000] "GET /.aws/credentials HTTP/1.1" 403 13 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:14 +1000] "GET /.boto HTTP/1.1" 404 30539 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:14 +1000] "GET /.github/.env HTTP/1.1" 404 30553 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:14 +1000] "GET /terraform.tfstate HTTP/1.1" 404 30546 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:14 +1000] "GET /.s3cfg HTTP/1.1" 404 30547 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:14 +1000] "GET /docker-compose.yaml HTTP/1.1" 404 30547 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:14 +1000] "GET /.svn/entries HTTP/1.1" 404 30542 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:16 +1000] "GET /.gitconfig HTTP/1.1" 404 30542 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.81.125 - - [14/Aug/2026:09:18:16 +1000] "GET /secrets.yml HTTP/1.1" 404 30542 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" --- last 30 samples (run-up to this incident) --- 2026-08-14 09:15:51 L1=1.44 run=3 blk=0 avail=7426 (63.3%) swpO=0 conn=2 myRSS=1750 php=1 phpRSS=162 ap=27 tcp=31 topuser=madalice 2026-08-14 09:15:59 L1=1.40 run=4 blk=0 avail=7508 (64.0%) swpO=0 conn=3 myRSS=1750 php=2 phpRSS=158 ap=25 tcp=40 topuser=madalice 2026-08-14 09:16:01 L1=1.45 run=4 blk=0 avail=7422 (63.3%) swpO=0 conn=2 myRSS=1750 php=2 phpRSS=105 ap=28 tcp=44 topuser=evolution 2026-08-14 09:16:09 L1=1.50 run=1 blk=0 avail=7526 (64.2%) swpO=0 conn=3 myRSS=1750 php=0 phpRSS=0 ap=37 tcp=39 topuser=- 2026-08-14 09:16:11 L1=1.37 run=2 blk=0 avail=7486 (63.8%) swpO=0 conn=2 myRSS=1750 php=1 phpRSS=87 ap=35 tcp=39 topuser=corpkicks 2026-08-14 09:16:19 L1=1.43 run=1 blk=0 avail=7541 (64.3%) swpO=0 conn=3 myRSS=1763 php=0 phpRSS=0 ap=32 tcp=34 topuser=- 2026-08-14 09:16:21 L1=1.39 run=3 blk=0 avail=7511 (64.0%) swpO=0 conn=2 myRSS=1763 php=1 phpRSS=66 ap=30 tcp=37 topuser=evolution 2026-08-14 09:16:29 L1=1.62 run=1 blk=0 avail=7498 (63.9%) swpO=0 conn=3 myRSS=1763 php=0 phpRSS=0 ap=37 tcp=44 topuser=- 2026-08-14 09:16:31 L1=1.62 run=1 blk=0 avail=7497 (63.9%) swpO=0 conn=1 myRSS=1763 php=0 phpRSS=0 ap=37 tcp=42 topuser=- 2026-08-14 09:16:39 L1=1.61 run=2 blk=0 avail=7497 (63.9%) swpO=0 conn=2 myRSS=1763 php=1 phpRSS=64 ap=33 tcp=35 topuser=madalice 2026-08-14 09:16:41 L1=1.61 run=2 blk=0 avail=7322 (62.4%) swpO=0 conn=1 myRSS=1763 php=1 phpRSS=245 ap=32 tcp=37 topuser=madalice 2026-08-14 09:16:49 L1=1.44 run=3 blk=0 avail=7281 (62.1%) swpO=0 conn=2 myRSS=1764 php=2 phpRSS=184 ap=33 tcp=47 topuser=corpkicks 2026-08-14 09:16:51 L1=1.44 run=2 blk=0 avail=7486 (63.8%) swpO=0 conn=1 myRSS=1764 php=1 phpRSS=40 ap=37 tcp=45 topuser=evolution 2026-08-14 09:16:59 L1=1.93 run=5 blk=0 avail=6804 (58.0%) swpO=0 conn=2 myRSS=1765 php=4 phpRSS=569 ap=39 tcp=48 topuser=corpkicks 2026-08-14 09:17:01 L1=1.93 run=1 blk=0 avail=7480 (63.8%) swpO=0 conn=1 myRSS=1765 php=0 phpRSS=0 ap=39 tcp=47 topuser=- 2026-08-14 09:17:09 L1=1.78 run=1 blk=0 avail=7490 (63.9%) swpO=0 conn=2 myRSS=1765 php=0 phpRSS=0 ap=37 tcp=39 topuser=- 2026-08-14 09:17:11 L1=1.78 run=1 blk=0 avail=7488 (63.8%) swpO=0 conn=1 myRSS=1765 php=0 phpRSS=0 ap=37 tcp=48 topuser=- 2026-08-14 09:17:19 L1=1.65 run=3 blk=0 avail=7378 (62.9%) swpO=0 conn=2 myRSS=1784 php=0 phpRSS=0 ap=49 tcp=40 topuser=- 2026-08-14 09:17:21 L1=1.65 run=6 blk=0 avail=7350 (62.7%) swpO=0 conn=1 myRSS=1784 php=2 phpRSS=104 ap=48 tcp=51 topuser=evolution 2026-08-14 09:17:29 L1=1.77 run=2 blk=0 avail=7345 (62.6%) swpO=0 conn=2 myRSS=1784 php=1 phpRSS=82 ap=48 tcp=54 topuser=evolution 2026-08-14 09:17:31 L1=1.77 run=6 blk=0 avail=7342 (62.6%) swpO=0 conn=2 myRSS=1784 php=1 phpRSS=58 ap=48 tcp=64 topuser=alison 2026-08-14 09:17:39 L1=1.65 run=2 blk=0 avail=7328 (62.5%) swpO=0 conn=1 myRSS=1784 php=0 phpRSS=0 ap=54 tcp=55 topuser=- 2026-08-14 09:17:41 L1=1.65 run=1 blk=0 avail=7349 (62.7%) swpO=0 conn=2 myRSS=1784 php=0 phpRSS=0 ap=52 tcp=55 topuser=- 2026-08-14 09:17:49 L1=1.63 run=1 blk=0 avail=7414 (63.2%) swpO=0 conn=1 myRSS=1784 php=0 phpRSS=0 ap=45 tcp=42 topuser=- 2026-08-14 09:17:51 L1=1.63 run=2 blk=0 avail=7278 (62.1%) swpO=0 conn=2 myRSS=1784 php=1 phpRSS=185 ap=43 tcp=43 topuser=madalice 2026-08-14 09:18:00 L1=1.69 run=3 blk=0 avail=7367 (62.8%) swpO=0 conn=1 myRSS=1784 php=2 phpRSS=172 ap=35 tcp=42 topuser=tubesupplies 2026-08-14 09:18:01 L1=1.69 run=6 blk=0 avail=7432 (63.4%) swpO=0 conn=2 myRSS=1784 php=1 phpRSS=72 ap=35 tcp=47 topuser=tubesupplies 2026-08-14 09:18:10 L1=2.48 run=5 blk=0 avail=6888 (58.7%) swpO=0 conn=1 myRSS=1784 php=4 phpRSS=690 ap=39 tcp=49 topuser=madalice 2026-08-14 09:18:11 L1=2.48 run=4 blk=0 avail=7287 (62.1%) swpO=0 conn=2 myRSS=1784 php=3 phpRSS=241 ap=40 tcp=48 topuser=infinium 2026-08-14 09:18:20 L1=4.15 run=20 blk=0 avail=5763 (49.1%) swpO=317 conn=14 myRSS=1781 php=17 phpRSS=2225 ap=43 tcp=47 topuser=madalice