INCIDENT 2026-08-18 13:07:25 trigger: swapout=5214/s ================================================================== load: 27.90 9.53 4.70 6/714 1528314 ncpu:10 mem_avail: 7304MB/11729MB (62.3%) swap_used:3834MB swapout:5214/s blocked(D):1 running:7 iowait:12.9% steal:0.0% php: 4 procs / 425MB heaviest user: madalice (1 procs, 260MB) apache: 89 procs tcp_estab: 67 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1700 nobody 88 958 root 238 483 madalice 1 260 netdata 8 198 evolution 7 197 cpanellogin 1 41 kurri 5 39 mailnull 4 27 dovenull 6 24 wp-toolkit 6 17 mailman 20 12 zabbix 1 11 cpanelphpmyadmin 1 8 alison 1 8 lowrange 1 7 dovecot 3 7 nscd 1 5 named 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 1 260 evolution 3 192 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 1378 MB Active(file): 903 MB Inactive(file): 287 MB Dirty: 3 MB Writeback: 0 MB SReclaimable: 292 MB CommitLimit: 9960 MB Committed_AS: 8603 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 11:56:09 60 /usr/bin/imunify-agent-proxy 1521038 root 07:25 2508 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 1740976 9.0 Ssl 3-05:16:48 /usr/sbin/mariadbd 1528221 1527805 madalice 266444 75.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 170016 2.5 Ssl 50-02:57:30 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000360 998750 root 92820 0.1 S 10:42:36 spamd child 998750 1 root 89740 0.0 Ss 10:44:41 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1528185 1527568 evolution 70676 7.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1528263 1527828 evolution 69508 14.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1528293 1527836 evolution 66916 14.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2575382 1 root 46048 0.0 Ss 3-05:16:51 /usr/lib/systemd/systemd-journald 1474499 1353308 cpanellogin 42588 0.0 S 56:34 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 1528284 1469 root 31148 0.0 S 00:01 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2223 1201 root 29808 0.0 Sl 50-02:57:29 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1000361 998750 root 24048 0.0 S 10:42:36 spamd child 1469 1 root 23356 0.1 Ss 50-02:57:29 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 998083 1 root 18248 0.0 Ss 10:45:14 lfd - sleeping 1522440 1276780 nobody 16980 0.0 D 05:54 /usr/sbin/httpd -k start 1527831 1276780 nobody 16836 0.0 S 00:22 /usr/sbin/httpd -k start 185104 2431 netdata 16516 2.0 Sl 5-16:33:48 /usr/libexec/netdata/plugins.d/apps.plugin 1 1527803 1276780 nobody 15708 0.0 S 00:23 /usr/sbin/httpd -k start 1527826 1276780 nobody 15160 0.1 S 00:22 /usr/sbin/httpd -k start 1527830 1276780 nobody 15104 0.0 S 00:22 /usr/sbin/httpd -k start 1463 1 root 15040 0.0 Ss 50-02:57:29 tailwatchd 1527802 1276780 nobody 15012 0.0 S 00:23 /usr/sbin/httpd -k start 1527835 1276780 nobody 14944 0.1 S 00:22 /usr/sbin/httpd -k start 1527827 1276780 nobody 14932 0.0 S 00:22 /usr/sbin/httpd -k start 1527807 1276780 nobody 14892 0.0 S 00:23 /usr/sbin/httpd -k start 1527828 1276780 nobody 14848 0.1 S 00:22 /usr/sbin/httpd -k start 1527839 1276780 nobody 14840 0.1 S 00:22 /usr/sbin/httpd -k start 1527808 1276780 nobody 14800 0.0 S 00:23 /usr/sbin/httpd -k start 1527834 1276780 nobody 14768 0.0 S 00:22 /usr/sbin/httpd -k start 1527804 1276780 nobody 14684 0.0 S 00:23 /usr/sbin/httpd -k start 1527806 1276780 nobody 14684 0.0 S 00:23 /usr/sbin/httpd -k start 1527838 1276780 nobody 14624 0.0 S 00:22 /usr/sbin/httpd -k start 1527805 1276780 nobody 14564 0.0 S 00:23 /usr/sbin/httpd -k start 1527832 1276780 nobody 14452 0.0 S 00:22 /usr/sbin/httpd -k start 1527836 1276780 nobody 14416 0.0 S 00:22 /usr/sbin/httpd -k start 1527825 1276780 nobody 14236 0.1 S 00:22 /usr/sbin/httpd -k start 1527829 1276780 nobody 14180 0.5 S 00:22 /usr/sbin/httpd -k start 1353308 1 root 13776 0.0 Ss 27-10:26:00 cpsrvd (SSL) - waiting for connections 1527787 1276780 nobody 13240 0.0 S 00:24 /usr/sbin/httpd -k start 1527785 1276780 nobody 12996 0.0 S 00:24 /usr/sbin/httpd -k start 1109893 1471 root 12672 0.1 S 07:42:09 cPhulkd - dbprocessor 1518014 1276780 nobody 12488 0.0 S 10:24 /usr/sbin/httpd -k start 1526564 1276780 nobody 12368 0.1 S 01:32 /usr/sbin/httpd -k start 1523146 1276780 nobody 12320 0.2 S 05:09 /usr/sbin/httpd -k start 1525663 1276780 nobody 12272 0.1 S 02:14 /usr/sbin/httpd -k start 1527784 1276780 nobody 12036 0.0 S 00:24 /usr/sbin/httpd -k start 1528350 1525742 evolution 11916 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1204 1 zabbix 11776 0.2 Ssl 50-02:57:30 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1527617 1276780 nobody 11648 0.0 S 00:34 /usr/sbin/httpd -k start 1526671 1276780 nobody 11276 0.0 S 01:26 /usr/sbin/httpd -k start 1527597 1276780 nobody 11264 0.0 S 00:35 /usr/sbin/httpd -k start 1528148 1471 root 11172 0.0 S 00:05 cPhulkd - processor - http socket 1525639 1276780 nobody 11108 0.0 S 02:15 /usr/sbin/httpd -k start 1525097 1276780 nobody 11080 0.0 S 02:44 /usr/sbin/httpd -k start 1525742 1276780 nobody 11040 0.0 S 02:11 /usr/sbin/httpd -k start 1525076 1276780 nobody 11024 0.0 S 02:45 /usr/sbin/httpd -k start 1527596 1276780 nobody 10960 0.0 S 00:35 /usr/sbin/httpd -k start 1525071 1276780 nobody 10936 0.0 S 02:45 /usr/sbin/httpd -k start 1525096 1276780 nobody 10932 0.0 S 02:44 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+---------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+---------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8021216 | root | 85-1559715131 | Execute | 0 | Updating | UPDATE inventory SET soh = '13' WHERE id = '10366' | | 8021211 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 8021101 | root | 85-1559715131 | Execute | 0 | Sending data | SELECT quotes.* , CASE WHEN quotes.jobid > 0 THEN 'JOB' WHEN quotes.status = 0 THEN 'NEW' WHEN quotes.status = 1 THEN 'SENT' WHEN quotes.status = 100 THEN 'DELETED' ELSE 'DRAFT' END AS statustext , quotetypes.name AS typetex | +---------+------+---------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 673 corpkicks/corporatekicks.com.au-ssl_log 181 evolution/portal.evolutionerp.com.au-ssl_log 153 aaa/aaadownunder.com.au-ssl_log 65 corpkicks/corporatekicks.com.au 56 madalice/madalice.com.au-ssl_log 44 olympic/olympicfencing.com.au-ssl_log 3 speedlin/speedlinefencing.com.au-ssl_log 3 infinium/infinium.net.au-ssl_log 2 otterfencing/otterfencing.com.au-ssl_log 2 alison/alisonarts.com.au-ssl_log 1 customkidscom/customkids.com.au 1 speedlin/speedlinefencing.com.au 1 (total vhosts taking traffic: 13) --- top client IPs across all vhosts (last 3 min) --- 410 203.54.180.238 232 103.100.225.91 186 103.104.165.99 71 193.82.239.232 67 182.239.240.254 50 20.226.7.189 32 20.228.229.148 24 116.91.223.246 21 147.161.213.78 17 1.144.107.82 17 103.104.164.114 13 203.214.146.60 10 118.127.40.55 5 203.31.118.167 5 180.181.236.49 --- top request paths across all vhosts (last 3 min) --- 234 POST /functions.php 87 GET /app/ajax.php 53 POST /quoteditsave.php 50 GET /index.php 46 GET /factory_session_checker.php 40 GET /heartbeat.php 32 POST /plugins/csvexporter/plugin.php 32 POST /app/ajax/selectFilter.php 24 GET /factory_session_processed_qty.php 24 GET /factory_session_joiner.php 22 POST /itemModify.php 18 POST //functions.php 17 GET //app/ajax.php 16 POST /app/ajax/selectFilterSingle.php 14 HEAD /index.php 13 POST /app/ajax.php 12 POST //jobeditsave.php 12 POST /clienteditsave.php 10 POST /plugins/pipe/pipetopostsave.php 9 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 234 POST /functions.php 87 GET /app/ajax.php 53 POST /quoteditsave.php 43 GET /index.php 32 POST /plugins/csvexporter/plugin.php 32 POST /app/ajax/selectFilter.php 22 POST /itemModify.php 18 POST //functions.php 17 GET //app/ajax.php 16 POST /app/ajax/selectFilterSingle.php 14 HEAD /index.php 13 POST /app/ajax.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:13:07:25 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D29406&call=getUserSetting&caller=ajaxSubmitLocal&seq=19306940308 HTTP/1.1" 200 159 "https://my.evolutionerp.com.a 203.54.180.238 - - [18/Aug/2026:13:07:25 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D29406&call=getUserSetting&caller=ajaxSubmitLocal&seq=18229544695 HTTP/1.1" 200 112 "https://my. 203.54.180.238 - - [18/Aug/2026:13:07:25 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29406" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 103.104.165.99 - - [18/Aug/2026:13:07:25 +1000] "POST /inveditsave.php HTTP/1.1" 302 27 "https://my.evolutionerp.com.au/index.php?page=invedit&id=10366&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 103.104.165.99 - - [18/Aug/2026:13:07:24 +1000] "POST /quoteditsave.php?call=getTheQuotes HTTP/1.1" 200 1599 "https://my.evolutionerp.com.au/index.php?page=quotereg&contact=Newcastle+International+Hockey+Centre" "Mozilla 193.82.239.232 - - [18/Aug/2026:13:07:25 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 382 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36756§ionid=32701" "Mozilla/5.0 (Windows NT 1 116.91.223.246 - - [18/Aug/2026:13:07:22 +1000] "GET /index.php?page=quotedit"eid=78499§ionid=0 HTTP/1.1" 200 211265 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78499" "Mozilla/5.0 (Windows NT 103.104.165.99 - - [18/Aug/2026:13:07:25 +1000] "GET /index.php?page=invedit&id=10366 HTTP/1.1" 200 38460 "https://my.evolutionerp.com.au/index.php?page=invedit&id=10366&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win 203.54.180.238 - - [18/Aug/2026:13:07:26 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter= HTTP/1.1" 200 22686 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78502§ionid=0" "Mozilla/5.0 203.54.180.238 - - [18/Aug/2026:13:07:26 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 4 GET /product/ubank-custom-samba-sneakers-navy-orange/ 4 GET /product/stealth-cyber-custom-nike-dunk-low/ 4 GET /product/resonate-nike-af1-design-9/ 4 GET /product/resonate-nike-af1-design-4/ 4 GET /product/resonate-nike-af1-design-2/ 4 GET /product/resonate-nike-af1-design-1/ 4 GET /product/cloudflare-custom-nike-sneakers-design-1/ 4 GET /product/cloudflare-custom-nike-design-2/ 4 GET /product/baidam-custom-nike-courts/ 4 GET /product/baidam-custom-adidas-superstars/ 3 POST /wp-cron.php 3 GET /product/untitled-product-2/ -- last 10 requests -- 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product-category/ubank/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product-category/dentsply/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product-category/mcdonalds/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:07:10 +1000] "GET /product-category/coastal/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:07:02 +1000] "GET /product/resonate-nike-af1-design-5/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product-category/baidam/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product/resonate-nike-af1-design-7/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product-tag/70s/ HTTP/1.1" 200 15594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.100.225.91 - - [18/Aug/2026:13:07:02 +1000] "GET /product/resonate-nike-af1-design-4/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ 103.100.225.91 - - [18/Aug/2026:13:07:03 +1000] "GET /product/resonate-nike-af1-design-3/ HTTP/1.1" 200 15449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/ == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 46 GET /factory_session_checker.php 40 GET /heartbeat.php 24 GET /factory_session_processed_qty.php 24 GET /factory_session_joiner.php 8 POST /portal/register 7 GET /index.php 1 POST /login.php 1 POST /factory_functions.php 1 GET /userlogin.php 1 GET /logoff.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:13:07:04 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [18/Aug/2026:13:07:04 +1000] "GET /factory_session_joiner.php?id=34687 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [18/Aug/2026:13:07:04 +1000] "GET /heartbeat.php?sentAt=1787022421&bytes=106,131,204,85&_=1787021456864 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:13:07:07 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:13:07:07 +1000] "GET /heartbeat.php?sentAt=1787022427&bytes=106,131,204,91&_=1786971218327 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:13:07:07 +1000] "GET /heartbeat.php?sentAt=1787022425&bytes=106,131,204,89&_=1787002019074 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:13:07:11 +1000] "GET /heartbeat.php?sentAt=1787022431&bytes=106,131,204,95&_=1787021456865 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:13:07:12 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:13:07:15 +1000] "GET /factory_session_joiner.php?id=34687 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [18/Aug/2026:13:07:14 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb --- last 30 samples (run-up to this incident) --- 2026-08-18 13:05:02 L1=2.11 run=6 blk=0 avail=6224 (53.1%) swpO=0 conn=6 myRSS=2628 php=5 phpRSS=504 ap=49 tcp=46 topuser=madalice 2026-08-18 13:05:02 L1=2.11 run=9 blk=0 avail=6212 (53.0%) swpO=0 conn=5 myRSS=2628 php=5 phpRSS=537 ap=49 tcp=47 topuser=olympic 2026-08-18 13:05:12 L1=2.39 run=5 blk=0 avail=6021 (51.3%) swpO=0 conn=6 myRSS=2628 php=6 phpRSS=718 ap=53 tcp=60 topuser=madalice 2026-08-18 13:05:13 L1=2.39 run=4 blk=0 avail=6068 (51.7%) swpO=0 conn=5 myRSS=2628 php=5 phpRSS=638 ap=53 tcp=56 topuser=madalice 2026-08-18 13:05:22 L1=2.47 run=15 blk=0 avail=6020 (51.3%) swpO=0 conn=6 myRSS=2629 php=13 phpRSS=849 ap=66 tcp=64 topuser=corpkicks 2026-08-18 13:05:23 L1=2.47 run=21 blk=0 avail=4929 (42.0%) swpO=686 conn=13 myRSS=2612 php=14 phpRSS=2034 ap=66 tcp=62 topuser=corpkicks 2026-08-18 13:05:32 L1=4.01 run=7 blk=0 avail=6274 (53.5%) swpO=1042 conn=6 myRSS=2602 php=4 phpRSS=396 ap=58 tcp=52 topuser=otterfencing 2026-08-18 13:05:34 L1=3.77 run=3 blk=0 avail=6541 (55.8%) swpO=323 conn=13 myRSS=2602 php=1 phpRSS=68 ap=56 tcp=44 topuser=evolution 2026-08-18 13:05:42 L1=4.19 run=11 blk=0 avail=6286 (53.6%) swpO=0 conn=3 myRSS=2602 php=5 phpRSS=442 ap=55 tcp=64 topuser=madalice 2026-08-18 13:05:44 L1=3.93 run=5 blk=0 avail=6320 (53.9%) swpO=0 conn=3 myRSS=2602 php=2 phpRSS=276 ap=59 tcp=48 topuser=madalice 2026-08-18 13:05:52 L1=3.70 run=25 blk=1 avail=4384 (37.4%) swpO=223 conn=18 myRSS=2592 php=17 phpRSS=2777 ap=55 tcp=69 topuser=corpkicks 2026-08-18 13:05:54 L1=5.24 run=34 blk=0 avail=3314 (28.3%) swpO=2720 conn=28 myRSS=2570 php=29 phpRSS=4192 ap=63 tcp=81 topuser=corpkicks 2026-08-18 13:06:02 L1=7.95 run=29 blk=0 avail=3642 (31.1%) swpO=11829 conn=19 myRSS=2486 php=22 phpRSS=3692 ap=86 tcp=89 topuser=corpkicks 2026-08-18 13:06:04 L1=9.15 run=5 blk=0 avail=6117 (52.2%) swpO=9333 conn=4 myRSS=2486 php=4 phpRSS=589 ap=85 tcp=80 topuser=corpkicks 2026-08-18 13:06:13 L1=8.58 run=2 blk=0 avail=6444 (54.9%) swpO=0 conn=19 myRSS=2486 php=1 phpRSS=149 ap=77 tcp=39 topuser=madalice 2026-08-18 13:06:15 L1=7.97 run=2 blk=0 avail=6471 (55.2%) swpO=0 conn=4 myRSS=2486 php=1 phpRSS=126 ap=75 tcp=35 topuser=madalice 2026-08-18 13:06:23 L1=7.49 run=2 blk=1 avail=6373 (54.3%) swpO=0 conn=19 myRSS=2486 php=2 phpRSS=285 ap=67 tcp=37 topuser=madalice 2026-08-18 13:06:25 L1=7.13 run=4 blk=0 avail=6496 (55.4%) swpO=0 conn=4 myRSS=2486 php=2 phpRSS=172 ap=65 tcp=42 topuser=madalice 2026-08-18 13:06:33 L1=6.50 run=4 blk=0 avail=6560 (55.9%) swpO=0 conn=19 myRSS=2465 php=2 phpRSS=181 ap=57 tcp=43 topuser=madalice 2026-08-18 13:06:35 L1=6.50 run=3 blk=0 avail=6453 (55.0%) swpO=0 conn=4 myRSS=2442 php=2 phpRSS=325 ap=55 tcp=41 topuser=madalice 2026-08-18 13:06:43 L1=5.89 run=3 blk=0 avail=6542 (55.8%) swpO=0 conn=2 myRSS=2442 php=1 phpRSS=175 ap=49 tcp=50 topuser=madalice 2026-08-18 13:06:45 L1=5.89 run=25 blk=0 avail=5883 (50.2%) swpO=0 conn=19 myRSS=2442 php=17 phpRSS=1438 ap=49 tcp=55 topuser=corpkicks 2026-08-18 13:06:54 L1=11.31 run=52 blk=3 avail=1007 (8.6%) swpO=6815 conn=44 myRSS=2294 php=45 phpRSS=7335 ap=82 tcp=86 topuser=corpkicks 2026-08-18 13:06:55 L1=11.31 run=49 blk=4 avail=2337 (19.9%) swpO=10066 conn=42 myRSS=2260 php=43 phpRSS=6008 ap=80 tcp=91 topuser=corpkicks 2026-08-18 13:07:04 L1=17.20 run=63 blk=2 avail=2005 (17.1%) swpO=2569 conn=48 myRSS=2260 php=56 phpRSS=6548 ap=108 tcp=103 topuser=corpkicks 2026-08-18 13:07:05 L1=17.20 run=53 blk=0 avail=2078 (17.7%) swpO=0 conn=44 myRSS=2260 php=53 phpRSS=6474 ap=106 tcp=101 topuser=corpkicks 2026-08-18 13:07:15 L1=27.07 run=7 blk=51 avail=766 (6.5%) swpO=29529 conn=46 myRSS=1731 php=52 phpRSS=8343 ap=107 tcp=70 topuser=corpkicks 2026-08-18 13:07:16 L1=27.07 run=62 blk=9 avail=1089 (9.3%) swpO=30847 conn=43 myRSS=1723 php=49 phpRSS=7864 ap=107 tcp=65 topuser=corpkicks 2026-08-18 13:07:25 L1=27.90 run=7 blk=1 avail=7304 (62.3%) swpO=5214 conn=4 myRSS=1700 php=4 phpRSS=425 ap=89 tcp=67 topuser=madalice 2026-08-18 13:07:26 L1=27.90 run=3 blk=0 avail=7350 (62.7%) swpO=3764 conn=2 myRSS=1702 php=3 phpRSS=353 ap=88 tcp=63 topuser=madalice