INCIDENT 2026-08-18 08:47:38 trigger: swapout=2053/s ================================================================== load: 2.37 2.48 2.31 2/687 1266883 ncpu:10 mem_avail: 5906MB/11729MB (50.4%) swap_used:2172MB swapout:2053/s blocked(D):7 running:2 iowait:2.5% steal:0.0% php: 8 procs / 833MB heaviest user: corpkicks (8 procs, 833MB) apache: 50 procs tcp_estab: 59 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2578 root 243 910 corpkicks 8 860 nobody 49 796 netdata 8 250 cpanellogin 1 72 mailnull 7 61 alison 5 60 kurri 4 46 dovenull 6 27 wp-toolkit 6 20 evolution 4 19 zabbix 1 15 mailman 20 14 nscd 1 8 dovecot 3 8 named 1 5 dbus 1 2 cpanelconnecttrack 1 2 polkitd 1 1 --- php workers by user --- USER PROCS RSS_MB corpkicks 8 875 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4123 MB Active(file): 2928 MB Inactive(file): 1277 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 382 MB CommitLimit: 9960 MB Committed_AS: 7879 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 07:36:22 9096 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2640768 7.3 Ssl 3-00:57:01 /usr/sbin/mariadbd 1266803 1265717 corpkicks 274036 53.0 S 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1220 1 netdata 200820 2.5 Ssl 49-22:37:43 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000360 998750 root 180276 0.0 S 06:22:49 spamd child 998750 1 root 166940 0.0 Ss 06:24:54 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2575382 1 root 152576 0.0 Ss 3-00:57:04 /usr/lib/systemd/systemd-journald 1000361 998750 root 124832 0.0 S 06:22:49 spamd child 1266850 1266187 corpkicks 90680 31.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1266845 1266188 corpkicks 90632 32.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1266848 1265747 corpkicks 90556 31.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1266851 1265921 corpkicks 90524 32.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1266849 1265345 corpkicks 90508 33.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1266840 1260045 corpkicks 90496 33.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1266846 1266218 corpkicks 90488 32.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1249291 1353308 cpanellogin 73748 0.1 S 17:23 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 2223 1201 root 41856 0.0 Sl 49-22:37:42 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41660 0.0 Ss 27-06:06:13 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 32596 0.1 Sl 49-22:37:38 /usr/libexec/netdata/plugins.d/go.d.plugin 1 998083 1 root 29436 0.0 Ss 06:25:27 lfd - sleeping 1463 1 root 26412 0.0 Ss 49-22:37:42 tailwatchd 1469 1 root 23516 0.1 Ss 49-22:37:42 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1260045 1276780 nobody 21668 0.1 S 06:54 /usr/sbin/httpd -k start 1265345 1276780 nobody 20788 0.1 S 01:39 /usr/sbin/httpd -k start 1261787 1276780 nobody 20364 0.0 S 05:22 /usr/sbin/httpd -k start 1264933 1276780 nobody 20160 0.1 S 02:07 /usr/sbin/httpd -k start 1262880 1276780 nobody 20064 0.0 S 04:08 /usr/sbin/httpd -k start 1264337 1276780 nobody 19988 0.0 S 02:41 /usr/sbin/httpd -k start 1265921 1276780 nobody 19500 0.1 S 00:54 /usr/sbin/httpd -k start 1265775 1276780 nobody 19424 0.0 S 01:10 /usr/sbin/httpd -k start 1265748 1276780 nobody 19404 0.0 S 01:11 /usr/sbin/httpd -k start 1266216 1276780 nobody 19296 0.1 S 00:36 /usr/sbin/httpd -k start 1262469 1276780 nobody 19280 0.0 S 04:36 /usr/sbin/httpd -k start 1263568 1276780 nobody 19236 0.0 S 03:34 /usr/sbin/httpd -k start 1264544 1276780 nobody 19228 0.0 S 02:37 /usr/sbin/httpd -k start 1266188 1276780 nobody 18936 0.1 S 00:37 /usr/sbin/httpd -k start 1266218 1276780 nobody 18840 0.1 S 00:36 /usr/sbin/httpd -k start 1265351 1276780 nobody 18656 0.0 S 01:38 /usr/sbin/httpd -k start 1264543 1276780 nobody 18644 0.0 S 02:37 /usr/sbin/httpd -k start 1263581 1276780 nobody 18516 0.0 S 03:33 /usr/sbin/httpd -k start 1260422 1276780 nobody 18504 0.0 S 06:30 /usr/sbin/httpd -k start 1265001 1276780 nobody 18408 0.1 S 02:06 /usr/sbin/httpd -k start 1266187 1276780 nobody 18256 0.0 S 00:37 /usr/sbin/httpd -k start 1265739 1276780 nobody 18148 0.0 S 01:12 /usr/sbin/httpd -k start 1266214 1276780 nobody 18116 0.0 S 00:36 /usr/sbin/httpd -k start 1265777 1276780 nobody 18024 0.0 S 01:10 /usr/sbin/httpd -k start 1265776 1276780 nobody 18008 0.0 S 01:10 /usr/sbin/httpd -k start 1266220 1276780 nobody 17876 0.0 S 00:36 /usr/sbin/httpd -k start 1266186 1276780 nobody 17768 0.0 S 00:37 /usr/sbin/httpd -k start 1265951 1276780 nobody 17680 0.1 S 00:51 /usr/sbin/httpd -k start 1265938 1276780 nobody 17592 0.0 S 00:52 /usr/sbin/httpd -k start 1266124 1276780 nobody 17552 0.0 S 00:38 /usr/sbin/httpd -k start 1262926 1276780 nobody 17428 0.0 S 04:06 /usr/sbin/httpd -k start 1266215 1276780 nobody 17048 0.0 S 00:36 /usr/sbin/httpd -k start 1109893 1471 root 16900 0.0 S 03:22:22 cPhulkd - dbprocessor 1471 1 root 16868 0.0 Ss 49-22:37:42 cPhulkd - processor 1264658 1471 root 16860 0.0 S 02:26 cPhulkd - processor - http socket 1265000 1276780 nobody 16744 0.0 S 02:06 /usr/sbin/httpd -k start 1265717 1276780 nobody 16384 0.0 R 01:15 /usr/sbin/httpd -k start 185104 2431 netdata 16104 2.0 Sl 5-12:14:01 /usr/libexec/netdata/plugins.d/apps.plugin 1 1266824 1276780 nobody 15664 0.5 S 00:02 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 5910529 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 421 madalice/auction.madalice.com.au-ssl_log 309 evolution/portal.evolutionerp.com.au-ssl_log 169 nrg/nrgservices.net.au-ssl_log 118 speedlin/speedlinefencing.com.au-ssl_log 90 corpkicks/corporatekicks.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 8 alison/alisonarts.com.au-ssl_log 5 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 310 185.177.72.69 272 203.54.180.238 137 103.104.165.99 100 158.158.34.183 89 20.116.17.175 73 182.239.240.254 65 103.104.164.114 17 190.92.174.183 16 116.91.223.246 11 180.181.236.49 6 34.21.252.160 5 40.80.82.167 5 193.82.239.232 4 203.31.118.167 3 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 313 GET / 214 POST /functions.php 61 GET /app/ajax.php 60 GET /factory_session_checker.php 45 GET /heartbeat.php 39 GET /index.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 11 POST /quoteditsave.php 11 POST /plugins/csvexporter/plugin.php 9 POST /plugins/fencecosting/plugin.php 9 POST /app/ajax.php 8 POST /jobeditsave.php 8 POST /clienteditsave.php 8 POST /app/ajax/selectFilterSingle.php 8 GET //app/ajax.php 7 POST /app/ajax/selectFilter.php 4 POST /purchaseaddsave.php 4 POST //functions.php 3 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 214 POST /functions.php 61 GET /app/ajax.php 37 GET /index.php 11 POST /quoteditsave.php 11 POST /plugins/csvexporter/plugin.php 9 POST /plugins/fencecosting/plugin.php 9 POST /app/ajax.php 8 POST /jobeditsave.php 8 POST /clienteditsave.php 8 POST /app/ajax/selectFilterSingle.php 8 GET //app/ajax.php 7 POST /app/ajax/selectFilter.php -- last 10 requests -- 103.104.164.114 - - [18/Aug/2026:08:47:33 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dreportsdashboard&call=getUserSetting&caller=ajaxSubmitLocal&seq=17582662561 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/in 103.104.165.99 - - [18/Aug/2026:08:47:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 182.239.240.254 - - [18/Aug/2026:08:47:34 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1189 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 182.239.240.254 - - [18/Aug/2026:08:47:34 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1189 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 103.104.164.114 - - [18/Aug/2026:08:47:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=reportsdashboard" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 116.91.223.246 - - [18/Aug/2026:08:47:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78465§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 116.91.223.246 - - [18/Aug/2026:08:47:32 +1000] "GET /index.php?page=quotedit"eid=77209 HTTP/1.1" 200 202895 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 116.91.223.246 - - [18/Aug/2026:08:47:35 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=77209" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [18/Aug/2026:08:47:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 233 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78466" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 116.91.223.246 - - [18/Aug/2026:08:47:35 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=load_fensa_modal HTTP/1.1" 200 357 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=77209" "Mozilla/5.0 (Win == madalice/auction.madalice.com.au-ssl_log == -- top paths -- 310 GET / -- last 10 requests -- 185.177.72.69 - - [18/Aug/2026:08:47:35 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:35 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:36 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:36 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:37 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:38 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:38 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:38 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:39 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg 185.177.72.69 - - [18/Aug/2026:08:47:39 +1000] "GET /?param=value%C2%B6m=value2&redirect=/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cg == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 60 GET /factory_session_checker.php 45 GET /heartbeat.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 2 POST /factory_functions.php 2 GET /index.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:08:47:23 +1000] "GET /factory_session_joiner.php?id=34667 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [18/Aug/2026:08:47:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:08:47:26 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:08:47:27 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [18/Aug/2026:08:47:27 +1000] "GET /factory_session_joiner.php?id=34673 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [18/Aug/2026:08:47:27 +1000] "GET /heartbeat.php?sentAt=1787006847&bytes=106,131,143,127&_=1786971216769 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:08:47:27 +1000] "GET /heartbeat.php?sentAt=1787006845&bytes=106,131,143,125&_=1787002017516 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:08:47:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:08:47:29 +1000] "GET /heartbeat.php?sentAt=1787006849&bytes=106,131,143,129&_=1787002624870 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:08:47:31 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-08-18 08:45:10 L1=2.21 run=2 blk=0 avail=6109 (52.1%) swpO=0 conn=2 myRSS=2622 php=3 phpRSS=484 ap=42 tcp=50 topuser=corpkicks 2026-08-18 08:45:18 L1=2.12 run=3 blk=0 avail=6456 (55.0%) swpO=0 conn=5 myRSS=2622 php=3 phpRSS=149 ap=39 tcp=52 topuser=evolution 2026-08-18 08:45:20 L1=2.19 run=2 blk=0 avail=6372 (54.3%) swpO=0 conn=3 myRSS=2622 php=2 phpRSS=213 ap=37 tcp=47 topuser=madalice 2026-08-18 08:45:28 L1=2.17 run=1 blk=0 avail=6508 (55.5%) swpO=0 conn=5 myRSS=2622 php=1 phpRSS=40 ap=38 tcp=56 topuser=evolution 2026-08-18 08:45:30 L1=2.32 run=1 blk=0 avail=6524 (55.6%) swpO=0 conn=3 myRSS=2622 php=0 phpRSS=0 ap=38 tcp=56 topuser=- 2026-08-18 08:45:38 L1=2.45 run=2 blk=0 avail=6423 (54.8%) swpO=0 conn=5 myRSS=2622 php=1 phpRSS=40 ap=44 tcp=46 topuser=evolution 2026-08-18 08:45:40 L1=2.34 run=1 blk=0 avail=6447 (55.0%) swpO=0 conn=3 myRSS=2622 php=0 phpRSS=0 ap=42 tcp=47 topuser=- 2026-08-18 08:45:48 L1=2.63 run=2 blk=0 avail=6513 (55.5%) swpO=0 conn=5 myRSS=2622 php=1 phpRSS=40 ap=38 tcp=45 topuser=evolution 2026-08-18 08:45:50 L1=2.50 run=1 blk=0 avail=6527 (55.6%) swpO=0 conn=3 myRSS=2622 php=0 phpRSS=0 ap=38 tcp=47 topuser=- 2026-08-18 08:45:58 L1=2.38 run=5 blk=0 avail=6357 (54.2%) swpO=0 conn=5 myRSS=2622 php=4 phpRSS=252 ap=36 tcp=49 topuser=aaa 2026-08-18 08:46:01 L1=2.27 run=3 blk=0 avail=6438 (54.9%) swpO=0 conn=3 myRSS=2622 php=2 phpRSS=99 ap=39 tcp=56 topuser=vinesit 2026-08-18 08:46:08 L1=2.57 run=1 blk=0 avail=6510 (55.5%) swpO=0 conn=5 myRSS=2622 php=1 phpRSS=0 ap=41 tcp=40 topuser=- 2026-08-18 08:46:11 L1=2.44 run=1 blk=0 avail=6544 (55.8%) swpO=0 conn=3 myRSS=2622 php=0 phpRSS=0 ap=38 tcp=41 topuser=- 2026-08-18 08:46:18 L1=2.49 run=2 blk=0 avail=6508 (55.5%) swpO=0 conn=2 myRSS=2622 php=2 phpRSS=88 ap=35 tcp=46 topuser=madalice 2026-08-18 08:46:21 L1=2.45 run=1 blk=0 avail=6547 (55.8%) swpO=0 conn=1 myRSS=2622 php=0 phpRSS=0 ap=35 tcp=49 topuser=- 2026-08-18 08:46:28 L1=2.41 run=1 blk=0 avail=6534 (55.7%) swpO=0 conn=2 myRSS=2622 php=0 phpRSS=0 ap=38 tcp=53 topuser=- 2026-08-18 08:46:31 L1=2.38 run=3 blk=0 avail=6340 (54.1%) swpO=0 conn=1 myRSS=2622 php=1 phpRSS=202 ap=42 tcp=55 topuser=madalice 2026-08-18 08:46:38 L1=2.59 run=1 blk=0 avail=6521 (55.6%) swpO=0 conn=2 myRSS=2622 php=0 phpRSS=0 ap=39 tcp=48 topuser=- 2026-08-18 08:46:41 L1=2.46 run=4 blk=0 avail=6526 (55.6%) swpO=0 conn=1 myRSS=2622 php=1 phpRSS=0 ap=37 tcp=49 topuser=- 2026-08-18 08:46:48 L1=2.50 run=2 blk=0 avail=6452 (55.0%) swpO=0 conn=2 myRSS=2622 php=2 phpRSS=104 ap=41 tcp=54 topuser=evolution 2026-08-18 08:46:51 L1=2.78 run=3 blk=0 avail=6444 (54.9%) swpO=0 conn=1 myRSS=2622 php=3 phpRSS=146 ap=41 tcp=48 topuser=evolution 2026-08-18 08:46:58 L1=2.72 run=3 blk=0 avail=6363 (54.3%) swpO=0 conn=2 myRSS=2622 php=4 phpRSS=259 ap=40 tcp=54 topuser=evolution 2026-08-18 08:47:01 L1=2.66 run=4 blk=0 avail=6417 (54.7%) swpO=0 conn=1 myRSS=2622 php=3 phpRSS=146 ap=43 tcp=58 topuser=evolution 2026-08-18 08:47:08 L1=2.69 run=6 blk=0 avail=6238 (53.2%) swpO=0 conn=2 myRSS=2622 php=7 phpRSS=378 ap=54 tcp=56 topuser=evolution 2026-08-18 08:47:11 L1=2.72 run=2 blk=0 avail=6415 (54.7%) swpO=0 conn=1 myRSS=2622 php=0 phpRSS=0 ap=54 tcp=57 topuser=- 2026-08-18 08:47:18 L1=2.50 run=4 blk=0 avail=6404 (54.6%) swpO=0 conn=1 myRSS=2622 php=1 phpRSS=46 ap=49 tcp=57 topuser=evolution 2026-08-18 08:47:21 L1=2.30 run=3 blk=0 avail=6445 (55.0%) swpO=0 conn=1 myRSS=2622 php=1 phpRSS=0 ap=49 tcp=56 topuser=- 2026-08-18 08:47:28 L1=2.35 run=2 blk=0 avail=6454 (55.0%) swpO=0 conn=1 myRSS=2622 php=1 phpRSS=36 ap=49 tcp=50 topuser=tubesupplies 2026-08-18 08:47:31 L1=2.49 run=1 blk=0 avail=6473 (55.2%) swpO=0 conn=1 myRSS=2622 php=0 phpRSS=0 ap=47 tcp=50 topuser=- 2026-08-18 08:47:38 L1=2.37 run=2 blk=7 avail=5906 (50.4%) swpO=2053 conn=9 myRSS=2578 php=8 phpRSS=833 ap=50 tcp=59 topuser=corpkicks