INCIDENT 2026-08-18 13:06:23 trigger: mysql_conn=19 ================================================================== load: 7.49 3.62 2.64 3/687 1526990 ncpu:10 mem_avail: 6373MB/11729MB (54.3%) swap_used:2668MB swapout:0/s blocked(D):1 running:2 iowait:2.4% steal:0.0% php: 2 procs / 285MB heaviest user: madalice (1 procs, 218MB) apache: 67 procs tcp_estab: 37 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2486 nobody 66 854 root 236 660 netdata 8 232 madalice 1 222 evolution 5 82 kurri 7 81 cpanellogin 1 58 dovenull 6 27 wp-toolkit 6 18 mailnull 2 17 zabbix 1 13 mailman 20 12 alison 1 12 lowrange 1 11 dovecot 3 8 nscd 1 7 named 1 4 dbus 1 2 cpanelconnecttrack 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 1 224 evolution 1 66 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 1959 MB Active(file): 1243 MB Inactive(file): 467 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 311 MB CommitLimit: 9960 MB Committed_AS: 7747 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 11:55:06 2072 /usr/bin/imunify-agent-proxy 1521038 root 06:22 2924 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2545784 9.0 Ssl 3-05:15:45 /usr/sbin/mariadbd 1526954 1523146 madalice 237744 104 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 191204 2.5 Ssl 50-02:56:27 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000360 998750 root 177980 0.1 S 10:41:33 spamd child 998750 1 root 115204 0.0 Ss 10:43:38 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1526957 1525775 evolution 68476 8.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1000361 998750 root 60396 0.0 S 10:41:33 spamd child 1474499 1353308 cpanellogin 60364 0.0 S 55:31 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2575382 1 root 47588 0.0 Ss 3-05:15:48 /usr/lib/systemd/systemd-journald 2223 1201 root 38948 0.0 Sl 50-02:56:26 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 36928 0.1 Ss 50-02:56:26 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 34200 0.0 Ss 27-10:24:57 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 24664 0.1 Sl 50-02:56:22 /usr/libexec/netdata/plugins.d/go.d.plugin 1 998083 1 root 23368 0.0 Ss 10:44:11 lfd - sleeping 1463 1 root 18368 0.0 Ss 50-02:56:26 tailwatchd 1526407 1276780 nobody 17928 0.1 S 00:40 /usr/sbin/httpd -k start 1526564 1276780 nobody 17428 0.1 S 00:29 /usr/sbin/httpd -k start 1526404 1276780 nobody 16632 0.0 S 00:40 /usr/sbin/httpd -k start 1526606 1276780 nobody 16612 0.0 S 00:28 /usr/sbin/httpd -k start 185104 2431 netdata 15960 2.0 Sl 5-16:32:45 /usr/libexec/netdata/plugins.d/apps.plugin 1 1526672 1276780 nobody 15880 0.0 S 00:23 /usr/sbin/httpd -k start 1526653 1276780 nobody 15800 0.0 S 00:24 /usr/sbin/httpd -k start 1526654 1276780 nobody 15792 0.0 S 00:24 /usr/sbin/httpd -k start 1109893 1471 root 15740 0.1 S 07:41:06 cPhulkd - dbprocessor 1526354 1276780 nobody 15644 0.0 S 00:42 /usr/sbin/httpd -k start 1526566 1276780 nobody 15628 0.0 S 00:29 /usr/sbin/httpd -k start 1526604 1276780 nobody 15612 0.0 S 00:28 /usr/sbin/httpd -k start 1526563 1276780 nobody 15572 0.0 S 00:29 /usr/sbin/httpd -k start 1526550 1276780 nobody 15528 0.0 S 00:30 /usr/sbin/httpd -k start 1526513 1276780 nobody 15512 0.0 S 00:31 /usr/sbin/httpd -k start 1526549 1276780 nobody 15464 0.0 S 00:30 /usr/sbin/httpd -k start 1526609 1276780 nobody 15416 0.0 S 00:28 /usr/sbin/httpd -k start 1526406 1276780 nobody 15240 0.0 S 00:40 /usr/sbin/httpd -k start 1526323 1276780 nobody 15216 0.0 S 00:44 /usr/sbin/httpd -k start 1526636 1276780 nobody 15152 0.1 S 00:26 /usr/sbin/httpd -k start 1526610 1276780 nobody 15140 0.0 S 00:28 /usr/sbin/httpd -k start 1526607 1276780 nobody 15132 0.0 S 00:28 /usr/sbin/httpd -k start 1526671 1276780 nobody 14916 0.1 S 00:23 /usr/sbin/httpd -k start 1526655 1276780 nobody 14908 0.0 S 00:24 /usr/sbin/httpd -k start 1526608 1276780 nobody 14848 0.0 S 00:28 /usr/sbin/httpd -k start 1526652 1276780 nobody 14844 0.0 S 00:24 /usr/sbin/httpd -k start 1526641 1276780 nobody 14832 0.0 S 00:25 /usr/sbin/httpd -k start 1526673 1276780 nobody 14760 0.0 S 00:23 /usr/sbin/httpd -k start 1519291 1276780 nobody 14564 0.0 S 08:04 /usr/sbin/httpd -k start 1526674 1276780 nobody 14520 0.0 S 00:23 /usr/sbin/httpd -k start 1526675 1276780 nobody 14496 0.0 S 00:23 /usr/sbin/httpd -k start 1522440 1276780 nobody 14432 0.0 S 04:51 /usr/sbin/httpd -k start 1526642 1276780 nobody 14424 0.0 S 00:25 /usr/sbin/httpd -k start 1521417 1276780 nobody 14256 0.0 S 06:05 /usr/sbin/httpd -k start 1518014 1276780 nobody 14008 0.0 S 09:21 /usr/sbin/httpd -k start 1204 1 zabbix 13740 0.2 Ssl 50-02:56:27 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1525775 1276780 nobody 13676 0.0 S 01:05 /usr/sbin/httpd -k start 1494454 3828812 alison 13280 0.0 S 33:16 dovecot/imap 1525639 1276780 nobody 13208 0.0 S 01:12 /usr/sbin/httpd -k start 1523146 1276780 nobody 13192 0.2 S 04:06 /usr/sbin/httpd -k start 1525089 1276780 nobody 13000 0.0 S 01:41 /usr/sbin/httpd -k start 1525772 1276780 nobody 12968 0.1 S 01:05 /usr/sbin/httpd -k start 1525760 1276780 nobody 12912 0.0 S 01:06 /usr/sbin/httpd -k start 1525071 1276780 nobody 12776 0.0 S 01:42 /usr/sbin/httpd -k start 1525742 1276780 nobody 12740 0.0 S 01:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8007673 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 8007671 | root | 108-1481181613 | Execute | 0 | Creating sort index | select * from quotes where clientid =? and jobid='0' and status < '5' order by id desc | | 8007580 | madalice_wp | madalice_wp | Query | 0 | Opening tables | SHOW FULL COLUMNS FROM `AMuqf6qZ_wflivetraffichuman` | +---------+-------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 734 evolution/portal.evolutionerp.com.au-ssl_log 180 corpkicks/corporatekicks.com.au-ssl_log 61 madalice/madalice.com.au-ssl_log 55 aaa/aaadownunder.com.au-ssl_log 31 corpkicks/corporatekicks.com.au 18 speedlin/speedlinefencing.com.au-ssl_log 8 alison/alisonarts.com.au-ssl_log 2 olympic/olympicfencing.com.au-ssl_log 2 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 425 203.54.180.238 209 103.104.165.99 94 182.239.240.254 72 103.100.225.91 52 193.82.239.232 50 101.166.96.210 41 20.228.229.148 21 147.161.213.78 20 203.214.146.60 16 103.104.164.114 12 1.144.107.82 9 20.226.7.189 9 118.127.40.55 8 116.91.223.246 7 203.31.118.167 --- top request paths across all vhosts (last 3 min) --- 238 POST /functions.php 100 GET /app/ajax.php 58 GET /index.php 56 GET /factory_session_checker.php 45 GET /heartbeat.php 44 POST /plugins/csvexporter/plugin.php 43 POST /quoteditsave.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 25 POST /app/ajax/selectFilter.php 25 GET //app/ajax.php 20 POST /app/ajax/selectFilterSingle.php 18 POST //jobeditsave.php 18 POST /itemModify.php 18 POST //functions.php 16 HEAD /index.php 13 POST /clienteditsave.php 12 POST /app/ajax.php 11 POST /plugins/fencecosting/plugin.php 10 GET //index.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 238 POST /functions.php 100 GET /app/ajax.php 51 GET /index.php 44 POST /plugins/csvexporter/plugin.php 43 POST /quoteditsave.php 25 POST /app/ajax/selectFilter.php 25 GET //app/ajax.php 20 POST /app/ajax/selectFilterSingle.php 18 POST //jobeditsave.php 18 POST /itemModify.php 18 POST //functions.php 16 HEAD /index.php -- last 10 requests -- 193.82.239.232 - - [18/Aug/2026:13:06:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36756§ionid=32701" "Mozilla/5.0 (Windows NT 10.0; 182.239.240.254 - - [18/Aug/2026:13:06:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 203.54.180.238 - - [18/Aug/2026:13:06:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78481§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.165.99 - - [18/Aug/2026:13:06:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedit&id=10366&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.165.99 - - [18/Aug/2026:13:06:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotereg&contact=Newcastle+International+Hockey+Centre" "Mozilla/5.0 (W 103.104.165.99 - - [18/Aug/2026:13:06:19 +1000] "GET /inveditsave.php?call=heal&itemid=10366 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=10366&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; 103.104.165.99 - - [18/Aug/2026:13:06:19 +1000] "GET /index.php?page=invedit&id=10366 HTTP/1.1" 200 38461 "https://my.evolutionerp.com.au/index.php?page=invedit&id=10366&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.165.99 - - [18/Aug/2026:13:06:20 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=10366&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [18/Aug/2026:13:06:20 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=9639&tab=clienteditcontacts" "Mozilla/5.0 (Windows N 203.54.180.238 - - [18/Aug/2026:13:06:20 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=25858&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 56 GET /factory_session_checker.php 45 GET /heartbeat.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 8 POST /portal/register 7 GET /index.php 1 POST /login.php 1 POST /factory_functions.php 1 GET /userlogin.php 1 GET /logoff.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:13:06:07 +1000] "GET /heartbeat.php?sentAt=1787022365&bytes=106,131,204,29&_=1787002019068 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:13:06:08 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:13:06:10 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:13:06:12 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [18/Aug/2026:13:06:12 +1000] "GET /factory_session_joiner.php?id=34687 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [18/Aug/2026:13:06:11 +1000] "GET /heartbeat.php?sentAt=1787022371&bytes=106,131,204,35&_=1787021456859 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:13:06:14 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:13:06:16 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:13:06:17 +1000] "GET /factory_session_joiner.php?id=34681 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [18/Aug/2026:13:06:17 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 123 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 4 POST /wp-cron.php 2 POST /wp-admin/admin-ajax.php 2 GET /product/untitled-product-2/ 2 GET /product/product/ 2 GET /product/inspire-cairns-real-estate-kids-af1/ 2 GET /product/cloudflare-custom-nike-sneakers-design-1/ 2 GET /product/baidam-custom-reebok/ 1 HEAD / 1 GET /shop/ 1 GET /product/ubank-custom-samba-sneakers-navy-orange/ 1 GET /product/ubank-custom-adidas-samba-sneakers/ 1 GET /product_tag-sitemap.xml -- last 10 requests -- 103.100.225.91 - - [18/Aug/2026:13:05:52 +1000] "GET /product/product/ HTTP/1.1" 200 15594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:05:55 +1000] "GET /product/resonate-nike-af1-design-7/ HTTP/1.1" 200 88455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ 103.100.225.91 - - [18/Aug/2026:13:05:55 +1000] "GET /product/resonate-nike-af1-design-6/ HTTP/1.1" 200 88455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ 103.100.225.91 - - [18/Aug/2026:13:05:53 +1000] "GET /product/baidam-custom-nike-courts/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/5 103.100.225.91 - - [18/Aug/2026:13:05:56 +1000] "GET /product/resonate-nike-af1-design-3/ HTTP/1.1" 200 88455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ 103.100.225.91 - - [18/Aug/2026:13:05:59 +1000] "GET /product/untitled-product-2/ HTTP/1.1" 200 152345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:05:55 +1000] "GET /product/inspire-cairns-real-estate-kids-af1/ HTTP/1.1" 200 156793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0 103.100.225.91 - - [18/Aug/2026:13:05:59 +1000] "GET /product/product/ HTTP/1.1" 200 151857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:05:59 +1000] "GET /product/cloudflare-custom-nike-sneakers-design-1/ HTTP/1.1" 200 88483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126 103.100.225.91 - - [18/Aug/2026:13:05:59 +1000] "GET /product/baidam-custom-reebok/ HTTP/1.1" 200 88443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 --- last 30 samples (run-up to this incident) --- 2026-08-18 13:03:52 L1=1.48 run=3 blk=0 avail=6507 (55.5%) swpO=0 conn=2 myRSS=2628 php=2 phpRSS=173 ap=45 tcp=47 topuser=evolution 2026-08-18 13:04:01 L1=1.95 run=5 blk=0 avail=6409 (54.6%) swpO=0 conn=3 myRSS=2628 php=6 phpRSS=321 ap=52 tcp=46 topuser=evolution 2026-08-18 13:04:02 L1=1.95 run=3 blk=0 avail=6402 (54.6%) swpO=0 conn=2 myRSS=2628 php=2 phpRSS=239 ap=51 tcp=48 topuser=madalice 2026-08-18 13:04:11 L1=1.81 run=2 blk=0 avail=6592 (56.2%) swpO=0 conn=3 myRSS=2628 php=2 phpRSS=115 ap=42 tcp=38 topuser=alison 2026-08-18 13:04:12 L1=1.81 run=2 blk=0 avail=6603 (56.3%) swpO=0 conn=2 myRSS=2628 php=1 phpRSS=82 ap=41 tcp=38 topuser=madalice 2026-08-18 13:04:21 L1=1.92 run=2 blk=0 avail=6552 (55.9%) swpO=0 conn=3 myRSS=2628 php=2 phpRSS=149 ap=42 tcp=43 topuser=madalice 2026-08-18 13:04:22 L1=1.92 run=3 blk=0 avail=6445 (54.9%) swpO=0 conn=2 myRSS=2628 php=2 phpRSS=259 ap=42 tcp=42 topuser=madalice 2026-08-18 13:04:31 L1=1.85 run=4 blk=0 avail=6372 (54.3%) swpO=0 conn=3 myRSS=2628 php=3 phpRSS=234 ap=40 tcp=37 topuser=madalice 2026-08-18 13:04:32 L1=1.85 run=4 blk=0 avail=6401 (54.6%) swpO=0 conn=2 myRSS=2628 php=4 phpRSS=371 ap=39 tcp=40 topuser=madalice 2026-08-18 13:04:41 L1=2.44 run=6 blk=0 avail=6057 (51.6%) swpO=0 conn=6 myRSS=2628 php=5 phpRSS=556 ap=67 tcp=73 topuser=corpkicks 2026-08-18 13:04:42 L1=2.44 run=4 blk=0 avail=6103 (52.0%) swpO=0 conn=5 myRSS=2628 php=4 phpRSS=495 ap=67 tcp=65 topuser=corpkicks 2026-08-18 13:04:52 L1=2.22 run=4 blk=0 avail=6326 (53.9%) swpO=0 conn=6 myRSS=2628 php=4 phpRSS=340 ap=58 tcp=47 topuser=madalice 2026-08-18 13:04:52 L1=2.22 run=3 blk=0 avail=6539 (55.8%) swpO=0 conn=5 myRSS=2628 php=0 phpRSS=0 ap=57 tcp=48 topuser=- 2026-08-18 13:05:02 L1=2.11 run=6 blk=0 avail=6224 (53.1%) swpO=0 conn=6 myRSS=2628 php=5 phpRSS=504 ap=49 tcp=46 topuser=madalice 2026-08-18 13:05:02 L1=2.11 run=9 blk=0 avail=6212 (53.0%) swpO=0 conn=5 myRSS=2628 php=5 phpRSS=537 ap=49 tcp=47 topuser=olympic 2026-08-18 13:05:12 L1=2.39 run=5 blk=0 avail=6021 (51.3%) swpO=0 conn=6 myRSS=2628 php=6 phpRSS=718 ap=53 tcp=60 topuser=madalice 2026-08-18 13:05:13 L1=2.39 run=4 blk=0 avail=6068 (51.7%) swpO=0 conn=5 myRSS=2628 php=5 phpRSS=638 ap=53 tcp=56 topuser=madalice 2026-08-18 13:05:22 L1=2.47 run=15 blk=0 avail=6020 (51.3%) swpO=0 conn=6 myRSS=2629 php=13 phpRSS=849 ap=66 tcp=64 topuser=corpkicks 2026-08-18 13:05:23 L1=2.47 run=21 blk=0 avail=4929 (42.0%) swpO=686 conn=13 myRSS=2612 php=14 phpRSS=2034 ap=66 tcp=62 topuser=corpkicks 2026-08-18 13:05:32 L1=4.01 run=7 blk=0 avail=6274 (53.5%) swpO=1042 conn=6 myRSS=2602 php=4 phpRSS=396 ap=58 tcp=52 topuser=otterfencing 2026-08-18 13:05:34 L1=3.77 run=3 blk=0 avail=6541 (55.8%) swpO=323 conn=13 myRSS=2602 php=1 phpRSS=68 ap=56 tcp=44 topuser=evolution 2026-08-18 13:05:42 L1=4.19 run=11 blk=0 avail=6286 (53.6%) swpO=0 conn=3 myRSS=2602 php=5 phpRSS=442 ap=55 tcp=64 topuser=madalice 2026-08-18 13:05:44 L1=3.93 run=5 blk=0 avail=6320 (53.9%) swpO=0 conn=3 myRSS=2602 php=2 phpRSS=276 ap=59 tcp=48 topuser=madalice 2026-08-18 13:05:52 L1=3.70 run=25 blk=1 avail=4384 (37.4%) swpO=223 conn=18 myRSS=2592 php=17 phpRSS=2777 ap=55 tcp=69 topuser=corpkicks 2026-08-18 13:05:54 L1=5.24 run=34 blk=0 avail=3314 (28.3%) swpO=2720 conn=28 myRSS=2570 php=29 phpRSS=4192 ap=63 tcp=81 topuser=corpkicks 2026-08-18 13:06:02 L1=7.95 run=29 blk=0 avail=3642 (31.1%) swpO=11829 conn=19 myRSS=2486 php=22 phpRSS=3692 ap=86 tcp=89 topuser=corpkicks 2026-08-18 13:06:04 L1=9.15 run=5 blk=0 avail=6117 (52.2%) swpO=9333 conn=4 myRSS=2486 php=4 phpRSS=589 ap=85 tcp=80 topuser=corpkicks 2026-08-18 13:06:13 L1=8.58 run=2 blk=0 avail=6444 (54.9%) swpO=0 conn=19 myRSS=2486 php=1 phpRSS=149 ap=77 tcp=39 topuser=madalice 2026-08-18 13:06:15 L1=7.97 run=2 blk=0 avail=6471 (55.2%) swpO=0 conn=4 myRSS=2486 php=1 phpRSS=126 ap=75 tcp=35 topuser=madalice 2026-08-18 13:06:23 L1=7.49 run=2 blk=1 avail=6373 (54.3%) swpO=0 conn=19 myRSS=2486 php=2 phpRSS=285 ap=67 tcp=37 topuser=madalice