INCIDENT 2026-08-17 11:57:26 trigger: swapout=2080/s ================================================================== load: 2.35 2.02 2.00 4/709 401154 ncpu:10 mem_avail: 5948MB/11729MB (50.7%) swap_used:1870MB swapout:2080/s blocked(D):0 running:5 iowait:0.7% steal:0.0% php: 4 procs / 307MB heaviest user: madalice (2 procs, 199MB) apache: 93 procs tcp_estab: 51 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2543 nobody 92 1445 root 234 964 netdata 8 247 madalice 2 229 evolution 6 111 mailnull 2 29 dovenull 6 27 kurri 2 23 wp-toolkit 6 20 cpanellogin 1 18 zabbix 1 15 mailman 20 15 aaa 1 13 alison 1 12 nscd 1 8 dovecot 3 7 named 1 6 polkitd 1 2 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 2 233 evolution 2 107 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4320 MB Active(file): 3134 MB Inactive(file): 1064 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 367 MB CommitLimit: 9960 MB Committed_AS: 8498 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 4090795 root 10:46:10 4020 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2604400 5.6 Ssl 2-04:06:48 /usr/sbin/mariadbd 2575382 1 root 206880 0.0 Ss 2-04:06:51 /usr/lib/systemd/systemd-journald 4146603 4140634 root 204984 0.1 S 09:24:19 spamd child 401110 400906 madalice 199432 89.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 196552 2.5 Ssl 49-01:47:30 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 4140634 1 root 149984 0.0 Ss 09:34:40 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4146604 4140634 root 145684 0.0 S 09:24:19 spamd child 401119 400507 evolution 69524 19.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 57356 0.0 Sl 49-01:47:29 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 401140 396726 madalice 55264 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 41692 0.0 Ss 26-09:16:00 cpsrvd (SSL) - waiting for connections 401120 400908 evolution 40872 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 33088 0.1 Sl 49-01:47:25 /usr/libexec/netdata/plugins.d/go.d.plugin 1 4139988 1 root 28892 0.0 Ss 09:35:13 lfd - sleeping 1469 1 root 27808 0.1 Ss 49-01:47:29 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 396726 1276780 nobody 21104 0.0 S 05:27 /usr/sbin/httpd -k start 397345 1276780 nobody 21040 0.0 S 04:45 /usr/sbin/httpd -k start 392762 1276780 nobody 20760 0.0 S 10:00 /usr/sbin/httpd -k start 398407 1276780 nobody 20604 0.0 S 03:22 /usr/sbin/httpd -k start 398945 1276780 nobody 20088 0.0 S 02:39 /usr/sbin/httpd -k start 398464 1276780 nobody 19924 0.0 S 03:19 /usr/sbin/httpd -k start 398453 1276780 nobody 19860 0.0 S 03:20 /usr/sbin/httpd -k start 398439 1276780 nobody 19684 0.0 S 03:21 /usr/sbin/httpd -k start 396696 1276780 nobody 19680 0.0 S 05:29 /usr/sbin/httpd -k start 398449 1276780 nobody 19504 0.0 S 03:20 /usr/sbin/httpd -k start 399667 1276780 nobody 19408 0.0 S 01:49 /usr/sbin/httpd -k start 398905 1276780 nobody 19220 0.1 S 02:41 /usr/sbin/httpd -k start 398739 1353308 cpanellogin 19148 0.0 S 02:52 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 399737 1276780 nobody 18888 0.0 S 01:44 /usr/sbin/httpd -k start 396727 1276780 nobody 18812 0.0 S 05:27 /usr/sbin/httpd -k start 399585 1276780 nobody 18696 0.0 S 01:58 /usr/sbin/httpd -k start 400456 1276780 nobody 18348 0.0 S 00:48 /usr/sbin/httpd -k start 400504 1276780 nobody 18324 0.0 S 00:46 /usr/sbin/httpd -k start 400507 1276780 nobody 18148 0.0 S 00:46 /usr/sbin/httpd -k start 400492 1276780 nobody 18132 0.0 S 00:47 /usr/sbin/httpd -k start 400506 1276780 nobody 18016 0.0 S 00:46 /usr/sbin/httpd -k start 400259 1276780 nobody 18012 0.0 S 01:02 /usr/sbin/httpd -k start 396728 1276780 nobody 17892 0.0 S 05:27 /usr/sbin/httpd -k start 398951 1276780 nobody 17860 0.0 S 02:39 /usr/sbin/httpd -k start 400901 1276780 nobody 17844 0.0 S 00:12 /usr/sbin/httpd -k start 400948 1276780 nobody 17696 0.1 S 00:11 /usr/sbin/httpd -k start 400508 1276780 nobody 17520 0.0 S 00:46 /usr/sbin/httpd -k start 400941 1276780 nobody 17468 0.0 S 00:11 /usr/sbin/httpd -k start 399860 1276780 nobody 17460 0.0 S 01:36 /usr/sbin/httpd -k start 400923 1276780 nobody 17384 0.0 S 00:11 /usr/sbin/httpd -k start 400910 1276780 nobody 17180 0.0 S 00:12 /usr/sbin/httpd -k start 400935 1276780 nobody 17084 0.0 S 00:11 /usr/sbin/httpd -k start 398408 1276780 nobody 17080 0.0 S 03:22 /usr/sbin/httpd -k start 400909 1276780 nobody 17080 0.0 S 00:12 /usr/sbin/httpd -k start 400946 1276780 nobody 17060 0.1 S 00:11 /usr/sbin/httpd -k start 400879 1276780 nobody 17048 0.0 S 00:14 /usr/sbin/httpd -k start 400944 1276780 nobody 17032 0.0 S 00:11 /usr/sbin/httpd -k start 400938 1276780 nobody 16956 0.0 S 00:11 /usr/sbin/httpd -k start 400942 1276780 nobody 16956 0.1 S 00:11 /usr/sbin/httpd -k start 400945 1276780 nobody 16936 0.1 S 00:11 /usr/sbin/httpd -k start 400934 1276780 nobody 16932 0.1 S 00:11 /usr/sbin/httpd -k start 400936 1276780 nobody 16928 0.0 S 00:11 /usr/sbin/httpd -k start 400344 1276780 nobody 16860 0.0 S 00:58 /usr/sbin/httpd -k start 400932 1276780 nobody 16740 0.0 S 00:11 /usr/sbin/httpd -k start 400876 1276780 nobody 16604 0.0 S 00:15 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+---------------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+---------------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3015485 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 3015482 | root | 85-1559715131 | Execute | 0 | Sending data | SELECT sum(quoteitems.total) as total, inventory.cat, quoteitems.sectionRef, quoteitems.sectionId from quoteitems,inventory where quoteitems.itemid=inventory.id AND quoteitems.quoteid=? AND quoteitems.status='1' group by quoteitems.sectionId, inventory.cat | +---------+------+---------------+---------+------+----------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 637 evolution/portal.evolutionerp.com.au-ssl_log 178 corpkicks/corporatekicks.com.au-ssl_log 30 aaa/aaadownunder.com.au-ssl_log 26 madalice/madalice.com.au-ssl_log 21 evolution/evolutionerp.com.au-ssl_log 9 alison/alisonarts.com.au-ssl_log 4 otter2/otterfencing.net.au 3 infinium/infinium.net.au-ssl_log 2 corpkicks/2025.corporatekicks.com.au-ssl_log 1 corpkicks/corporatekicks.com.au 1 cosgrovecreative/cosgrovecreative.com.au 1 kamcool/kamcool.com.au-ssl_log 1 (total vhosts taking traffic: 13) --- top client IPs across all vhosts (last 3 min) --- 433 203.54.180.238 150 103.104.165.99 69 103.104.164.114 67 101.182.108.127 44 101.166.96.210 21 180.181.236.49 19 182.239.240.254 18 193.82.239.232 14 119.18.0.1 8 202.67.77.2 7 172.70.252.78 7 118.127.40.55 6 87.58.206.114 4 83.99.206.180 3 66.132.172.138 --- top request paths across all vhosts (last 3 min) --- 216 POST /functions.php 118 GET /app/ajax.php 60 GET /index.php 56 POST /quoteditsave.php 54 GET /factory_session_checker.php 46 GET /heartbeat.php 32 POST /plugins/csvexporter/plugin.php 28 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 27 POST /app/ajax.php 24 POST /app/ajax/selectFilter.php 22 POST /itemModify.php 21 POST /app/ajax/selectFilterSingle.php 17 POST /plugins/fencecosting/plugin.php 11 POST /clienteditsave.php 8 POST / 7 POST /factory_functions.php 7 GET /store/kids-swarovski-crystal-airmax90/ 7 GET /plugins/fensa/fensa-ajax.php 7 GET / --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 216 POST /functions.php 118 GET /app/ajax.php 56 POST /quoteditsave.php 51 GET /index.php 32 POST /plugins/csvexporter/plugin.php 27 POST /app/ajax.php 24 POST /app/ajax/selectFilter.php 22 POST /itemModify.php 21 POST /app/ajax/selectFilterSingle.php 17 POST /plugins/fencecosting/plugin.php 11 POST /clienteditsave.php 7 GET /plugins/fensa/fensa-ajax.php -- last 10 requests -- 103.104.165.99 - - [17/Aug/2026:11:57:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11206" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [17/Aug/2026:11:57:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11104" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [17/Aug/2026:11:57:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11104" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [17/Aug/2026:11:57:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=19810&tab=clienteditgeneral" "Mozilla/5.0 (Windows N 101.166.96.210 - - [17/Aug/2026:11:57:23 +1000] "POST /quoteditsave.php?call=getTheQuotes HTTP/1.1" 200 779 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 101.182.108.127 - - [17/Aug/2026:11:57:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78448§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win 101.166.96.210 - - [17/Aug/2026:11:57:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 203.54.180.238 - - [17/Aug/2026:11:57:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=14039" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [17/Aug/2026:11:57:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29188&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [17/Aug/2026:11:57:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29161&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 54 GET /factory_session_checker.php 46 GET /heartbeat.php 28 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 9 GET /index.php 7 POST /factory_functions.php 4 POST /portal/register 1 PATCH /api/pickings.php 1 GET /userlogin.php -- last 10 requests -- 203.54.180.238 - - [17/Aug/2026:11:57:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [17/Aug/2026:11:57:23 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [17/Aug/2026:11:57:23 +1000] "GET /factory_session_joiner.php?id=34648 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [17/Aug/2026:11:57:24 +1000] "PATCH /api/pickings.php HTTP/1.1" 200 53 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37638" "Mozilla/5.0 (Linux; Android 10; K) Apple 203.54.180.238 - - [17/Aug/2026:11:57:24 +1000] "GET /heartbeat.php?sentAt=1786931837&bytes=106,130,106,125&_=1786917955131 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [17/Aug/2026:11:57:25 +1000] "POST /factory_functions.php HTTP/1.1" 302 20 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37638" "Mozilla/5.0 (Linux; Android 10; K) A 203.54.180.238 - - [17/Aug/2026:11:57:25 +1000] "GET /index.php?page=inventory_picking_goods&pickid=37638 HTTP/1.1" 200 12860 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37638" "Mozi 203.54.180.238 - - [17/Aug/2026:11:57:25 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [17/Aug/2026:11:57:25 +1000] "GET /heartbeat.php?sentAt=1786931844&bytes=106,130,106,132&_=1786712404202 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 103.104.165.99 - - [17/Aug/2026:11:57:25 +1000] "GET /heartbeat.php?sentAt=1786931845&bytes=106,130,106,133&_=1786916000098 HTTP/1.1" 302 52 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 7 POST / 5 HEAD / 2 POST /wp-cron.php 1 POST /wp-admin/admin-ajax.php 1 POST /product/cloudflare-custom-nike-sneakers-design-1/ 1 HEAD /wp-login.php 1 HEAD /wp-admin/post.php 1 HEAD /my-account/ 1 GET /product/ubank-custom-adidas-samba-sneakers/ 1 GET /product/stealth-cyber-custom-nike-af1/ 1 GET /product/cloudflare-custom-nike-sneakers-design-1/ 1 GET /product-category/inspire/ -- last 10 requests -- 172.70.252.78 - - [17/Aug/2026:11:56:47 +1000] "HEAD /?attaching_pdf=1&print_packinglist=true&email=amJyZXR0bGVAc3F1aXoubmV0&post=MTAzODE&type=print_invoice&user_print=1&_wpnonce=7c3bc45747&lang=en_US&access_key=wc_order 172.70.252.78 - - [17/Aug/2026:11:56:48 +1000] "HEAD /my-account/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 172.70.252.78 - - [17/Aug/2026:11:56:50 +1000] "HEAD /wp-admin/post.php?post=10381&action=edit HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 172.70.252.78 - - [17/Aug/2026:11:56:52 +1000] "HEAD /wp-login.php?redirect_to=https%3A%2F%2Fcorporatekicks.com.au%2Fwp-admin%2Fpost.php%3Fpost%3D10381%26action%3Dedit&reauth=1 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows N 118.127.40.55 - - [17/Aug/2026:11:56:51 +1000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=348cbde460 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://corporatekicks.com.au" 118.127.40.55 - - [17/Aug/2026:11:56:59 +1000] "POST /wp-cron.php?doing_wp_cron=1786931819.1648039817810058593750 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://corporatekicks.com.au" 83.99.206.180 - - [17/Aug/2026:11:57:03 +1000] "GET /product-category/cloudflare/ HTTP/1.1" 200 16554 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 S 34.196.51.17 - - [17/Aug/2026:11:57:09 +1000] "HEAD / HTTP/1.1" 200 - "https://corporatekicks.com.au/" "WPMUDEV Uptime Monitor 5.0 (https://wpmudev.com)" 119.18.0.1 - - [17/Aug/2026:11:57:16 +1000] "GET /product/cloudflare-custom-nike-sneakers-design-1/?attribute_size=US8%2FW9.5 HTTP/1.1" 200 40036 "https://corporatekicks.com.au/checkout/order-received/10381/?key=wc_order 119.18.0.1 - - [17/Aug/2026:11:57:19 +1000] "POST /?wc-ajax=square_digital_wallet_get_payment_request HTTP/1.1" 200 243 "https://corporatekicks.com.au/product/cloudflare-custom-nike-sneakers-design-1/?attribute_size=US8% --- last 30 samples (run-up to this incident) --- 2026-08-17 11:54:58 L1=1.60 run=4 blk=0 avail=6065 (51.7%) swpO=0 conn=2 myRSS=2602 php=4 phpRSS=470 ap=49 tcp=52 topuser=corpkicks 2026-08-17 11:55:05 L1=1.55 run=5 blk=0 avail=6350 (54.1%) swpO=0 conn=5 myRSS=2602 php=4 phpRSS=203 ap=45 tcp=45 topuser=evolution 2026-08-17 11:55:08 L1=1.59 run=4 blk=0 avail=6447 (55.0%) swpO=0 conn=2 myRSS=2602 php=1 phpRSS=37 ap=42 tcp=45 topuser=corpkicks 2026-08-17 11:55:15 L1=1.62 run=3 blk=0 avail=6426 (54.8%) swpO=0 conn=2 myRSS=2602 php=2 phpRSS=63 ap=43 tcp=37 topuser=evolution 2026-08-17 11:55:18 L1=1.49 run=1 blk=0 avail=6472 (55.2%) swpO=0 conn=1 myRSS=2602 php=0 phpRSS=0 ap=40 tcp=34 topuser=- 2026-08-17 11:55:25 L1=1.37 run=1 blk=0 avail=6482 (55.3%) swpO=0 conn=2 myRSS=2602 php=1 phpRSS=39 ap=39 tcp=40 topuser=evolution 2026-08-17 11:55:28 L1=1.26 run=1 blk=0 avail=6484 (55.3%) swpO=0 conn=1 myRSS=2602 php=0 phpRSS=0 ap=39 tcp=43 topuser=- 2026-08-17 11:55:35 L1=1.64 run=2 blk=0 avail=6402 (54.6%) swpO=0 conn=2 myRSS=2602 php=2 phpRSS=106 ap=42 tcp=47 topuser=evolution 2026-08-17 11:55:38 L1=1.59 run=5 blk=0 avail=6281 (53.6%) swpO=0 conn=1 myRSS=2602 php=6 phpRSS=339 ap=43 tcp=50 topuser=evolution 2026-08-17 11:55:45 L1=1.46 run=2 blk=0 avail=6162 (52.5%) swpO=0 conn=2 myRSS=2602 php=2 phpRSS=308 ap=47 tcp=44 topuser=corpkicks 2026-08-17 11:55:48 L1=1.43 run=3 blk=0 avail=6382 (54.4%) swpO=0 conn=1 myRSS=2602 php=1 phpRSS=65 ap=46 tcp=49 topuser=evolution 2026-08-17 11:55:55 L1=2.03 run=3 blk=0 avail=6362 (54.2%) swpO=0 conn=2 myRSS=2602 php=2 phpRSS=106 ap=45 tcp=50 topuser=evolution 2026-08-17 11:55:58 L1=2.03 run=4 blk=0 avail=6400 (54.6%) swpO=0 conn=1 myRSS=2602 php=1 phpRSS=0 ap=45 tcp=51 topuser=- 2026-08-17 11:56:05 L1=2.04 run=4 blk=0 avail=5936 (50.6%) swpO=0 conn=2 myRSS=2602 php=4 phpRSS=600 ap=44 tcp=40 topuser=corpkicks 2026-08-17 11:56:08 L1=2.04 run=1 blk=0 avail=6435 (54.9%) swpO=0 conn=1 myRSS=2602 php=0 phpRSS=0 ap=42 tcp=39 topuser=- 2026-08-17 11:56:15 L1=2.12 run=6 blk=0 avail=6359 (54.2%) swpO=0 conn=4 myRSS=2602 php=4 phpRSS=215 ap=38 tcp=42 topuser=evolution 2026-08-17 11:56:18 L1=2.12 run=13 blk=0 avail=6226 (53.1%) swpO=0 conn=3 myRSS=2602 php=6 phpRSS=398 ap=38 tcp=49 topuser=corpkicks 2026-08-17 11:56:26 L1=2.03 run=4 blk=0 avail=6369 (54.3%) swpO=0 conn=4 myRSS=2603 php=3 phpRSS=115 ap=42 tcp=49 topuser=evolution 2026-08-17 11:56:28 L1=2.03 run=1 blk=0 avail=6387 (54.5%) swpO=0 conn=3 myRSS=2603 php=0 phpRSS=0 ap=43 tcp=49 topuser=- 2026-08-17 11:56:36 L1=1.87 run=4 blk=0 avail=6244 (53.2%) swpO=0 conn=4 myRSS=2603 php=2 phpRSS=212 ap=46 tcp=48 topuser=evolution 2026-08-17 11:56:38 L1=1.87 run=6 blk=0 avail=6203 (52.9%) swpO=0 conn=3 myRSS=2603 php=4 phpRSS=313 ap=49 tcp=57 topuser=evolution 2026-08-17 11:56:46 L1=2.11 run=4 blk=0 avail=6199 (52.9%) swpO=0 conn=4 myRSS=2603 php=1 phpRSS=125 ap=61 tcp=55 topuser=corpkicks 2026-08-17 11:56:48 L1=2.11 run=5 blk=0 avail=6010 (51.2%) swpO=0 conn=3 myRSS=2603 php=4 phpRSS=432 ap=59 tcp=45 topuser=madalice 2026-08-17 11:56:56 L1=2.23 run=1 blk=0 avail=6121 (52.2%) swpO=0 conn=4 myRSS=2603 php=1 phpRSS=281 ap=51 tcp=42 topuser=corpkicks 2026-08-17 11:56:58 L1=2.23 run=2 blk=0 avail=6101 (52.0%) swpO=0 conn=3 myRSS=2603 php=2 phpRSS=347 ap=49 tcp=39 topuser=corpkicks 2026-08-17 11:57:06 L1=2.04 run=1 blk=0 avail=6448 (55.0%) swpO=0 conn=4 myRSS=2603 php=0 phpRSS=0 ap=41 tcp=29 topuser=- 2026-08-17 11:57:08 L1=2.04 run=4 blk=0 avail=6211 (53.0%) swpO=0 conn=3 myRSS=2603 php=2 phpRSS=309 ap=39 tcp=32 topuser=madalice 2026-08-17 11:57:16 L1=2.21 run=12 blk=0 avail=5639 (48.1%) swpO=0 conn=11 myRSS=2603 php=10 phpRSS=711 ap=100 tcp=97 topuser=madalice 2026-08-17 11:57:19 L1=2.21 run=13 blk=0 avail=5146 (43.9%) swpO=1891 conn=9 myRSS=2543 php=13 phpRSS=1339 ap=100 tcp=94 topuser=madalice 2026-08-17 11:57:26 L1=2.35 run=5 blk=0 avail=5948 (50.7%) swpO=2080 conn=3 myRSS=2543 php=4 phpRSS=307 ap=93 tcp=51 topuser=madalice