INCIDENT 2026-08-19 19:53:04 trigger: swapout=2527/s ================================================================== load: 3.27 1.46 1.25 9/723 2961341 ncpu:10 mem_avail: 5271MB/11729MB (44.9%) swap_used:2297MB swapout:2527/s blocked(D):1 running:10 iowait:1.6% steal:0.0% php: 7 procs / 690MB heaviest user: alison (3 procs, 249MB) apache: 116 procs tcp_estab: 62 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2848 nobody 115 1765 root 243 930 alison 4 278 netdata 8 250 madalice 1 208 mailman 20 182 infinium 1 112 olympic 1 78 tubesupplies 1 66 cpanellogin 1 62 kurri 3 35 dovenull 6 26 mailnull 3 25 evolution 6 23 wp-toolkit 6 17 named 1 15 zabbix 1 12 dovecot 3 6 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB alison 3 272 madalice 1 211 infinium 1 114 olympic 1 80 tubesupplies 1 67 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3451 MB Active(file): 2064 MB Inactive(file): 1122 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 413 MB CommitLimit: 9960 MB Committed_AS: 9462 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2064673 root 18:41:49 1816 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2916540 11.2 Ssl 4-12:02:28 /usr/sbin/mariadbd 2961125 2961062 madalice 219164 36.8 S 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 201508 2.5 Ssl 51-09:43:10 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2575382 1 root 184300 0.0 Ss 4-12:02:31 /usr/lib/systemd/systemd-journald 2122939 2112450 root 179644 0.0 S 17:14:36 spamd child 2661802 2112450 root 160176 0.0 S 06:38:49 spamd child 2961268 2960924 alison 106948 68.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2961269 2960874 alison 104520 67.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2961270 2960925 alison 93948 58.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2961285 2960921 olympic 92216 54.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2961290 2960895 tubesupplies 77880 45.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2946083 1353308 cpanellogin 64244 0.0 S 28:04 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2112450 1 root 61772 0.0 Ss 17:29:32 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2961350 2960917 olympic 60516 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2223 1201 root 55772 0.0 Sl 51-09:43:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 40968 0.0 Ss 28-17:11:40 cpsrvd (SSL) - waiting for connections 1469 1 root 36180 0.1 Ss 51-09:43:09 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 31256 0.1 Sl 51-09:43:05 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2961364 2961239 root 22684 0.0 S 00:00 /usr/sbin/exim -q 2959031 1276780 nobody 20704 0.0 S 03:15 /usr/sbin/httpd -k start 2958037 1276780 nobody 19712 0.0 S 05:28 /usr/sbin/httpd -k start 2958045 1276780 nobody 19392 0.0 S 05:27 /usr/sbin/httpd -k start 2960546 1276780 nobody 19280 0.0 S 00:45 /usr/sbin/httpd -k start 2958035 1276780 nobody 19216 0.0 S 05:29 /usr/sbin/httpd -k start 2958040 1276780 nobody 19164 0.0 S 05:28 /usr/sbin/httpd -k start 2958962 1276780 nobody 19132 0.0 S 03:27 /usr/sbin/httpd -k start 2959027 1276780 nobody 18936 0.0 S 03:16 /usr/sbin/httpd -k start 2959032 1276780 nobody 18700 0.0 S 03:15 /usr/sbin/httpd -k start 2960249 1276780 nobody 18540 0.1 S 01:27 /usr/sbin/httpd -k start 2960631 1276780 nobody 18420 0.0 S 00:40 /usr/sbin/httpd -k start 1463 1 root 18380 0.0 Ss 51-09:43:09 tailwatchd 2960899 1276780 nobody 18276 0.0 S 00:12 /usr/sbin/httpd -k start 2960874 1276780 nobody 18160 0.0 S 00:14 /usr/sbin/httpd -k start 2961210 1276780 nobody 18048 0.0 S 00:03 /usr/sbin/httpd -k start 2961211 1276780 nobody 18048 0.0 S 00:03 /usr/sbin/httpd -k start 2961213 1276780 nobody 18048 0.0 S 00:03 /usr/sbin/httpd -k start 2961212 1276780 nobody 17908 0.0 S 00:03 /usr/sbin/httpd -k start 2961067 1276780 nobody 17900 0.0 S 00:09 /usr/sbin/httpd -k start 2961051 1276780 nobody 17864 0.1 S 00:09 /usr/sbin/httpd -k start 2961054 1276780 nobody 17836 0.1 S 00:09 /usr/sbin/httpd -k start 2960632 1276780 nobody 17736 0.0 S 00:40 /usr/sbin/httpd -k start 2961158 1276780 nobody 17728 0.0 S 00:04 /usr/sbin/httpd -k start 2960900 1276780 nobody 17188 0.0 S 00:12 /usr/sbin/httpd -k start 2961056 1276780 nobody 17020 0.0 S 00:09 /usr/sbin/httpd -k start 2960920 1276780 nobody 16916 0.0 S 00:11 /usr/sbin/httpd -k start 2961159 1276780 nobody 16900 0.0 S 00:04 /usr/sbin/httpd -k start 2961004 1276780 nobody 16892 0.0 S 00:10 /usr/sbin/httpd -k start 2960915 1276780 nobody 16816 0.0 S 00:11 /usr/sbin/httpd -k start 2961052 1276780 nobody 16776 0.0 S 00:09 /usr/sbin/httpd -k start 2960930 1276780 nobody 16732 0.0 S 00:11 /usr/sbin/httpd -k start 2961060 1276780 nobody 16724 0.0 S 00:09 /usr/sbin/httpd -k start 2960990 1276780 nobody 16688 0.0 S 00:10 /usr/sbin/httpd -k start 2960916 1276780 nobody 16568 0.0 S 00:11 /usr/sbin/httpd -k start 185104 2431 netdata 16536 2.1 Sl 6-23:19:28 /usr/libexec/netdata/plugins.d/apps.plugin 1 2961005 1276780 nobody 16492 0.1 S 00:10 /usr/sbin/httpd -k start 2961002 1276780 nobody 16460 0.1 S 00:10 /usr/sbin/httpd -k start 2961058 1276780 nobody 16456 0.1 S 00:09 /usr/sbin/httpd -k start 2960998 1276780 nobody 16452 0.0 S 00:10 /usr/sbin/httpd -k start 2961053 1276780 nobody 16404 0.1 S 00:09 /usr/sbin/httpd -k start 2961065 1276780 nobody 16392 0.1 S 00:09 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 1463 Ds - tailwatchd 2961125 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 14406655 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min whiz/whizengineering.com.au-ssl_log 75 corpkicks/corporatekicks.com.au-ssl_log 24 aaa/aaadownunder.com.au-ssl_log 20 alison/alisonarts.com.au-ssl_log 16 cosgrovecreative/cosgrovecreative.com.au-ssl_log 16 evolution/my.evolutionerp.com.au-ssl_log 15 evolution/portal.evolutionerp.com.au-ssl_log 14 vinesit/vinesit.com.au-ssl_log 13 madalice/madalice.com.au-ssl_log 11 customc/customcentral.com.au-ssl_log 10 alison/alisonarts.com.au 7 evolution/evolutionerp.com.au-ssl_log 4 infinium/infinium.net.au 4 infinium/infinium.net.au-ssl_log 3 (total vhosts taking traffic: 14) --- top client IPs across all vhosts (last 3 min) --- 75 104.209.144.33 53 185.242.3.173 16 51.116.232.28 14 203.54.180.238 13 1.144.107.82 8 118.127.40.55 4 2001:8004:14b3:854f:e9ee:d12e:2428:2eb4 3 40.77.178.150 2 91.92.243.249 2 69.171.234.3 2 69.171.234.113 2 62.60.130.199 2 44.198.130.95 2 40.77.177.53 2 40.77.167.32 --- top request paths across all vhosts (last 3 min) --- 18 POST /wp-admin/admin-ajax.php 14 GET /heartbeat.php 14 GET / 13 GET /wp-content/themes/seotheme/db.php 8 POST /wp-plain.php 7 POST /ALFA_DATA/alfacgiapi/perl.alfa 6 GET /new-alison-arts-website-launched 5 POST /wp-cron.php 5 POST /functions.php 5 GET /wp-content/plugins/fix/up.php 5 GET /index.php 4 POST /wp-login.php 4 GET /wp-content/plugins/apikey/apikey.php 3 POST /alfacgiapi/perl.alfa 3 GET /new-alison-arts-website-launched/ 3 GET /app/ajax.php 2 GET /taking-small-break 2 GET /store/hand-painted-nike-cartoonsketchy/ 2 GET /plugins/content/apismtp/apismtp.php 2 GET /gallery/airbrushing-custom-paint/ --- busiest 3 vhosts: top paths + last 10 requests --- == whiz/whizengineering.com.au-ssl_log == -- top paths -- 1 GET /zznmg.php 1 GET /zwlsv.php 1 GET /zugvi.php 1 GET /zjggu.php 1 GET /yxijx.php 1 GET /wsrer.php 1 GET /wp-includes/wp_y13h6oGI.php 1 GET /wp-includes/theme-previews-exception.php 1 GET /wp-includes/theme-compat/82NtBt.php 1 GET /wp-includes/Text/r51tv7.php 1 GET /wp-includes/sodium_compat/rd64D5.php 1 GET /wp-includes/sitemaps/about.php -- last 10 requests -- 104.209.144.33 - - [19/Aug/2026:19:52:47 +1000] "GET /Cachex.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:47 +1000] "GET /Menu/fonts/%20backup/log/index/js/wpup.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:48 +1000] "GET /wp-2019.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:48 +1000] "GET /wp-includes/blocks/social-link/index.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:49 +1000] "GET /.cache/x.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:49 +1000] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:50 +1000] "GET /wp-content/index.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:50 +1000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:50 +1000] "GET /wp-includes/blocks/pullquote/windex.php HTTP/1.1" 401 36 "-" "-" 104.209.144.33 - - [19/Aug/2026:19:52:51 +1000] "GET /help/crnpwfiu.php HTTP/1.1" 401 36 "-" "-" == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 13 POST /wp-admin/admin-ajax.php 2 GET /wp-content/themes/seotheme/db.php 1 POST /wp-plain.php 1 POST /wp-cron.php 1 POST /ALFA_DATA/alfacgiapi/perl.alfa 1 POST /alfacgiapi/perl.alfa 1 HEAD / 1 GET /wp-content/plugins/fix/up.php 1 GET /wp-content/plugins/apikey/apikey.php 1 GET /wdjfiase.php 1 GET / -- last 10 requests -- 1.144.107.82 - - [19/Aug/2026:19:52:41 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://corporatekicks.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 185.242.3.173 - - [19/Aug/2026:19:52:51 +1000] "POST /wp-plain.php HTTP/1.1" 403 13 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/ 185.242.3.173 - - [19/Aug/2026:19:52:51 +1000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 6789 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537. 185.242.3.173 - - [19/Aug/2026:19:52:52 +1000] "GET /wdjfiase.php?Fox=d3wL7 HTTP/1.1" 403 6789 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/ 185.242.3.173 - - [19/Aug/2026:19:52:52 +1000] "GET / HTTP/1.1" 403 6789 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Saf 185.242.3.173 - - [19/Aug/2026:19:52:52 +1000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 403 6789 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) 185.242.3.173 - - [19/Aug/2026:19:52:52 +1000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 6789 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Ge 185.242.3.173 - - [19/Aug/2026:19:52:53 +1000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 403 6789 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gec 185.242.3.173 - - [19/Aug/2026:19:52:54 +1000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 6789 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Ge 185.242.3.173 - - [19/Aug/2026:19:52:54 +1000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 403 6789 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4 == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 4 GET / 3 POST /wp-login.php 2 POST /wp-cron.php 2 GET /wp-content/themes/seotheme/db.php 1 POST /wp-plain.php 1 POST /ALFA_DATA/alfacgiapi/perl.alfa 1 POST /alfacgiapi/perl.alfa 1 GET /wp-login.php 1 GET /wp-content/plugins/fix/up.php 1 GET /wp-content/plugins/apikey/apikey.php 1 GET /plugins/content/apismtp/apismtp.php 1 GET /eqhikytt.php -- last 10 requests -- 185.242.3.173 - - [19/Aug/2026:19:52:53 +1000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Ve 185.242.3.173 - - [19/Aug/2026:19:52:54 +1000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 185.242.3.173 - - [19/Aug/2026:19:52:54 +1000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 185.242.3.173 - - [19/Aug/2026:19:52:55 +1000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko 185.242.3.173 - - [19/Aug/2026:19:52:55 +1000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko 185.242.3.173 - - [19/Aug/2026:19:52:56 +1000] "POST /wp-plain.php HTTP/1.1" 403 13 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/ 185.242.3.173 - - [19/Aug/2026:19:52:56 +1000] "GET /eqhikytt.php?Fox=d3wL7 HTTP/1.1" 404 - "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 185.242.3.173 - - [19/Aug/2026:19:52:56 +1000] "GET / HTTP/1.1" 200 49957 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Sa 185.242.3.173 - - [19/Aug/2026:19:52:58 +1000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 404 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) 185.242.3.173 - - [19/Aug/2026:19:52:59 +1000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 404 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) --- last 30 samples (run-up to this incident) --- 2026-08-19 19:50:44 L1=0.56 run=2 blk=0 avail=6000 (51.2%) swpO=0 conn=1 myRSS=2897 php=2 phpRSS=346 ap=21 tcp=22 topuser=corpkicks 2026-08-19 19:50:44 L1=0.56 run=2 blk=0 avail=5930 (50.6%) swpO=0 conn=2 myRSS=2897 php=2 phpRSS=417 ap=21 tcp=21 topuser=corpkicks 2026-08-19 19:50:54 L1=0.84 run=3 blk=0 avail=6199 (52.9%) swpO=0 conn=1 myRSS=2897 php=2 phpRSS=158 ap=20 tcp=19 topuser=madalice 2026-08-19 19:50:54 L1=0.84 run=6 blk=0 avail=6083 (51.9%) swpO=0 conn=2 myRSS=2897 php=2 phpRSS=272 ap=19 tcp=18 topuser=madalice 2026-08-19 19:51:04 L1=1.01 run=1 blk=0 avail=6065 (51.7%) swpO=0 conn=1 myRSS=2897 php=1 phpRSS=260 ap=19 tcp=18 topuser=madalice 2026-08-19 19:51:04 L1=1.01 run=1 blk=0 avail=6064 (51.7%) swpO=0 conn=2 myRSS=2897 php=1 phpRSS=260 ap=19 tcp=18 topuser=madalice 2026-08-19 19:51:14 L1=0.94 run=1 blk=0 avail=6295 (53.7%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=19 tcp=22 topuser=- 2026-08-19 19:51:14 L1=0.94 run=1 blk=0 avail=6295 (53.7%) swpO=0 conn=2 myRSS=2897 php=0 phpRSS=0 ap=19 tcp=20 topuser=- 2026-08-19 19:51:24 L1=0.87 run=1 blk=0 avail=6296 (53.7%) swpO=1 conn=1 myRSS=2897 php=0 phpRSS=0 ap=19 tcp=21 topuser=- 2026-08-19 19:51:24 L1=0.87 run=1 blk=0 avail=6295 (53.7%) swpO=1 conn=2 myRSS=2897 php=0 phpRSS=0 ap=19 tcp=20 topuser=- 2026-08-19 19:51:34 L1=0.74 run=1 blk=0 avail=6312 (53.8%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=18 tcp=16 topuser=- 2026-08-19 19:51:34 L1=0.74 run=1 blk=0 avail=6311 (53.8%) swpO=0 conn=2 myRSS=2897 php=1 phpRSS=10 ap=18 tcp=20 topuser=evolution 2026-08-19 19:51:44 L1=0.71 run=4 blk=0 avail=6156 (52.5%) swpO=0 conn=1 myRSS=2897 php=1 phpRSS=177 ap=19 tcp=17 topuser=madalice 2026-08-19 19:51:44 L1=0.71 run=2 blk=0 avail=6121 (52.2%) swpO=0 conn=2 myRSS=2897 php=1 phpRSS=214 ap=19 tcp=17 topuser=madalice 2026-08-19 19:51:54 L1=0.67 run=1 blk=0 avail=6077 (51.8%) swpO=0 conn=1 myRSS=2897 php=1 phpRSS=261 ap=19 tcp=17 topuser=corpkicks 2026-08-19 19:51:54 L1=0.67 run=1 blk=0 avail=6077 (51.8%) swpO=0 conn=2 myRSS=2897 php=1 phpRSS=261 ap=18 tcp=16 topuser=corpkicks 2026-08-19 19:52:04 L1=0.72 run=1 blk=0 avail=6318 (53.9%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=16 tcp=17 topuser=- 2026-08-19 19:52:04 L1=0.66 run=1 blk=0 avail=6319 (53.9%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=16 tcp=18 topuser=- 2026-08-19 19:52:14 L1=0.69 run=1 blk=0 avail=6323 (53.9%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=16 tcp=16 topuser=- 2026-08-19 19:52:14 L1=0.64 run=1 blk=0 avail=6323 (53.9%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=16 tcp=16 topuser=- 2026-08-19 19:52:24 L1=0.66 run=1 blk=0 avail=6306 (53.8%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=17 tcp=23 topuser=- 2026-08-19 19:52:24 L1=0.61 run=2 blk=0 avail=6292 (53.7%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=18 tcp=23 topuser=- 2026-08-19 19:52:34 L1=0.56 run=1 blk=0 avail=6282 (53.6%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=20 tcp=22 topuser=- 2026-08-19 19:52:34 L1=0.52 run=1 blk=0 avail=6298 (53.7%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=20 tcp=22 topuser=- 2026-08-19 19:52:44 L1=0.47 run=1 blk=0 avail=6295 (53.7%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=18 tcp=20 topuser=- 2026-08-19 19:52:44 L1=0.44 run=1 blk=0 avail=6294 (53.7%) swpO=0 conn=1 myRSS=2897 php=0 phpRSS=0 ap=18 tcp=20 topuser=- 2026-08-19 19:52:54 L1=0.40 run=13 blk=0 avail=5465 (46.6%) swpO=0 conn=1 myRSS=2897 php=8 phpRSS=955 ap=49 tcp=78 topuser=corpkicks 2026-08-19 19:52:55 L1=1.25 run=8 blk=0 avail=5406 (46.1%) swpO=0 conn=1 myRSS=2897 php=7 phpRSS=905 ap=49 tcp=76 topuser=tubesupplies 2026-08-19 19:53:04 L1=2.59 run=10 blk=1 avail=5271 (44.9%) swpO=2527 conn=8 myRSS=2848 php=7 phpRSS=690 ap=116 tcp=62 topuser=alison 2026-08-19 19:53:05 L1=3.27 run=9 blk=2 avail=5158 (44.0%) swpO=2527 conn=9 myRSS=2848 php=8 phpRSS=855 ap=116 tcp=63 topuser=alison