INCIDENT 2026-08-20 14:07:39 trigger: swapout=2141/s ================================================================== load: 3.09 2.24 2.08 5/695 3939088 ncpu:10 mem_avail: 6179MB/11729MB (52.7%) swap_used:2834MB swapout:2141/s blocked(D):0 running:5 iowait:1.7% steal:0.0% php: 4 procs / 376MB heaviest user: madalice (3 procs, 233MB) apache: 71 procs tcp_estab: 83 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2763 nobody 70 1162 root 242 718 netdata 8 259 madalice 3 246 evolution 8 181 cpanellogin 1 105 mailman 20 99 mailnull 5 45 aaa 3 37 dovenull 6 25 kurri 2 23 wp-toolkit 6 17 zabbix 1 15 alison 1 13 named 1 12 nscd 1 7 dovecot 3 7 cpanelconnecttrack 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 3 249 evolution 1 153 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3729 MB Active(file): 2183 MB Inactive(file): 1550 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 393 MB CommitLimit: 9960 MB Committed_AS: 8199 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3248642 root 12:56:23 2580 /usr/bin/imunify-agent-proxy 3919546 root 07:39 1360 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2830160 11.7 Ssl 5-06:17:03 /usr/sbin/mariadbd 1220 1 netdata 208700 2.5 Ssl 52-03:57:45 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3939051 3937567 evolution 162368 71.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2575382 1 root 161924 0.0 Ss 5-06:17:06 /usr/lib/systemd/systemd-journald 3298115 3290507 root 152092 0.0 S 11:32:04 spamd child 3939050 3939033 madalice 113888 82.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3873022 1353308 cpanellogin 107584 0.0 S 58:58 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 3939058 3922388 madalice 79532 37.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3939059 3923793 madalice 75408 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3290507 1 root 49252 0.0 Ss 11:44:53 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3864059 3290507 root 46456 0.0 S 01:08:04 spamd child 2223 1201 root 43300 0.0 Sl 52-03:57:44 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41580 0.1 Ss 52-03:57:44 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41488 0.0 Ss 29-11:26:15 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 32224 0.1 Sl 52-03:57:40 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3922266 1276780 nobody 22860 0.0 S 04:33 /usr/sbin/httpd -k start 3921524 1276780 nobody 22116 0.0 S 05:32 /usr/sbin/httpd -k start 3919150 1276780 nobody 22004 0.0 S 08:11 /usr/sbin/httpd -k start 3922388 1276780 nobody 22004 0.1 S 04:26 /usr/sbin/httpd -k start 3923803 1276780 nobody 21240 0.0 S 02:35 /usr/sbin/httpd -k start 3920353 1276780 nobody 21152 0.0 S 07:00 /usr/sbin/httpd -k start 3922671 1276780 nobody 20956 0.0 S 04:01 /usr/sbin/httpd -k start 3923059 1276780 nobody 20712 0.1 S 03:23 /usr/sbin/httpd -k start 3937549 1276780 nobody 20616 0.1 S 02:00 /usr/sbin/httpd -k start 3923061 1276780 nobody 20356 0.0 S 03:23 /usr/sbin/httpd -k start 3924172 1276780 nobody 20172 0.0 S 02:14 /usr/sbin/httpd -k start 3937576 1276780 nobody 19968 0.1 S 01:59 /usr/sbin/httpd -k start 3923557 1276780 nobody 19876 0.0 S 02:44 /usr/sbin/httpd -k start 3938953 1276780 nobody 19832 0.5 S 00:09 /usr/sbin/httpd -k start 3937572 1276780 nobody 19804 0.1 S 01:59 /usr/sbin/httpd -k start 3937476 1276780 nobody 19596 0.0 S 02:02 /usr/sbin/httpd -k start 3923063 1276780 nobody 19592 0.0 S 03:23 /usr/sbin/httpd -k start 1463 1 root 19568 0.0 Ss 52-03:57:44 tailwatchd 3937567 1276780 nobody 19420 0.0 S 01:59 /usr/sbin/httpd -k start 3937568 1276780 nobody 19324 0.0 S 01:59 /usr/sbin/httpd -k start 3937575 1276780 nobody 19288 0.0 S 01:59 /usr/sbin/httpd -k start 3938617 1276780 nobody 19140 0.0 S 00:36 /usr/sbin/httpd -k start 3923251 1276780 nobody 18924 0.0 S 03:08 /usr/sbin/httpd -k start 3938361 1276780 nobody 18908 0.0 S 00:57 /usr/sbin/httpd -k start 3289952 1 root 18896 0.0 Ss 11:45:26 lfd - sleeping 3923793 1276780 nobody 18720 0.0 S 02:36 /usr/sbin/httpd -k start 3938153 1276780 nobody 18368 0.0 S 01:13 /usr/sbin/httpd -k start 3938281 1276780 nobody 18252 0.0 S 01:02 /usr/sbin/httpd -k start 3938831 1276780 nobody 18240 0.2 S 00:17 /usr/sbin/httpd -k start 3937566 1276780 nobody 17724 0.0 S 01:59 /usr/sbin/httpd -k start 185104 2431 netdata 17436 2.1 Sl 7-17:34:03 /usr/libexec/netdata/plugins.d/apps.plugin 1 3938385 1276780 nobody 17352 0.0 S 00:51 /usr/sbin/httpd -k start 3938287 1276780 nobody 16772 0.0 S 01:01 /usr/sbin/httpd -k start 3938853 1276780 nobody 16548 0.0 S 00:14 /usr/sbin/httpd -k start 3938744 1276780 nobody 16516 0.0 S 00:24 /usr/sbin/httpd -k start 3938833 1276780 nobody 16516 0.1 S 00:17 /usr/sbin/httpd -k start 3938990 1276780 nobody 16352 0.0 S 00:04 /usr/sbin/httpd -k start 3938994 1276780 nobody 16240 0.0 S 00:03 /usr/sbin/httpd -k start 3938989 1276780 nobody 16196 0.0 S 00:04 /usr/sbin/httpd -k start 3938821 1276780 nobody 16184 0.0 S 00:18 /usr/sbin/httpd -k start 3938841 1276780 nobody 16184 0.0 S 00:15 /usr/sbin/httpd -k start 3939021 1276780 nobody 16144 0.0 S 00:02 /usr/sbin/httpd -k start 3939031 1276780 nobody 16144 0.0 S 00:01 /usr/sbin/httpd -k start 3939032 1276780 nobody 16084 0.0 S 00:01 /usr/sbin/httpd -k start 3939030 1276780 nobody 16016 0.0 S 00:01 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 18438506 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 652 aaa/aaadownunder.com.au-ssl_log 385 evolution/portal.evolutionerp.com.au-ssl_log 122 candyfabcom/candyfab.com.au-ssl_log 99 alison/alisonarts.com.au-ssl_log 58 evolution/wp.evolutionerp.com.au 43 madalice/madalice.com.au-ssl_log 18 corpkicks/corporatekicks.com.au 7 corpkicks/corporatekicks.com.au-ssl_log 7 speedlin/speedlinefencing.com.au-ssl_log 6 evolution/evolutionerp.com.au-ssl_log 4 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 365 203.54.180.238 363 163.7.17.13 127 101.166.96.210 99 74.248.133.44 82 103.104.165.99 74 103.104.164.114 69 182.239.240.254 44 150.228.243.234 43 20.97.182.130 42 161.118.192.206 14 20.38.3.247 12 180.181.236.49 12 147.161.213.78 12 118.127.40.55 7 34.139.52.39 --- top request paths across all vhosts (last 3 min) --- 299 POST /functions.php 114 GET /app/ajax.php 55 GET /heartbeat.php 49 GET /index.php 32 GET /factory_session_checker.php 29 POST /plugins/csvexporter/plugin.php 29 GET /wp-admin/index.php 21 POST /quoteditsave.php 20 POST /wp-login.php 20 POST /app/ajax.php 19 POST /app/ajax/selectFilterSingle.php 18 GET /microservices/.env 17 POST //functions.php 17 GET /apps/backend/.env 16 GET /v1/.env 16 GET /packages/server/.env 16 GET /packages/config/.env 16 GET /factory_session_processed_qty.php 16 GET /factory_session_joiner.php 16 GET /apps/api/.env --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 299 POST /functions.php 114 GET /app/ajax.php 48 GET /index.php 29 POST /plugins/csvexporter/plugin.php 21 POST /quoteditsave.php 20 POST /app/ajax.php 19 POST /app/ajax/selectFilterSingle.php 17 POST //functions.php 14 POST /jobeditsave.php 13 POST /plugins/fencecosting/plugin.php 10 POST /clienteditsave.php 7 POST /mfreqsave.php -- last 10 requests -- 103.104.165.99 - - [20/Aug/2026:14:07:36 +1000] "GET /logoff.php?page=quotedit"eid=36804 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36804" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.165.99 - - [20/Aug/2026:14:07:37 +1000] "GET /index.php?page=quotedit"eid=36804 HTTP/1.1" 200 5261 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36804" "Mozilla/5.0 (Windows NT 10.0; Win64; 147.161.213.78 - - [20/Aug/2026:14:07:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=3161" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 103.104.165.99 - - [20/Aug/2026:14:07:38 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D36804&call=getUserSetting&caller=ajaxSubmitLocal&seq=12482500249 HTTP/1.1" 200 101 "https://my.evolutionerp 147.161.213.78 - - [20/Aug/2026:14:07:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=3628" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 147.161.213.78 - - [20/Aug/2026:14:07:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=3224" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 147.161.213.78 - - [20/Aug/2026:14:07:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=clientsites&clientid=1386" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A 203.54.180.238 - - [20/Aug/2026:14:07:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 103.104.165.99 - - [20/Aug/2026:14:07:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 52 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 203.54.180.238 - - [20/Aug/2026:14:07:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28288&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 18 GET /microservices/.env 17 GET /apps/backend/.env 16 GET /v1/.env 16 GET /packages/server/.env 16 GET /packages/config/.env 16 GET /apps/api/.env 15 GET /internal/.env 15 GET /gateway/.env 15 GET /apps/web/.env 14 GET /private/.env 14 GET /deployment/.env 13 GET /v2/.env -- last 10 requests -- 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /microservices/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /packages/server/.env HTTP/1.1" 403 12 "-" "python-requests/2.28.0" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /apps/api/.env HTTP/1.1" 403 12 "-" "curl/7.68.0" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /deploy/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /apps/backend/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "PATCH /v2/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /out/.env HTTP/1.1" 403 12 "-" "python-requests/2.28.0" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "OPTIONS /gateway/.env HTTP/1.1" 403 12 "-" "curl/7.68.0" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /build/.env HTTP/1.1" 403 12 "-" "Googlebot/2.1 (+http://www.google.com/bot.html)" 163.7.17.13 - - [20/Aug/2026:14:07:30 +1000] "GET /apps/web/.env HTTP/1.1" 403 12 "-" "Googlebot/2.1 (+http://www.google.com/bot.html)" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 55 GET /heartbeat.php 32 GET /factory_session_checker.php 16 GET /factory_session_processed_qty.php 16 GET /factory_session_joiner.php 1 POST /portal/register 1 POST /factory_functions.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [20/Aug/2026:14:07:15 +1000] "GET /heartbeat.php?sentAt=1787198833&bytes=106,134,125,113&_=1787174402137 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [20/Aug/2026:14:07:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:14:07:21 +1000] "GET /heartbeat.php?sentAt=1787198841&bytes=106,134,125,121&_=1787143292675 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [20/Aug/2026:14:07:21 +1000] "GET /heartbeat.php?sentAt=1787198841&bytes=106,134,125,121&_=1787196436563 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [20/Aug/2026:14:07:24 +1000] "GET /factory_session_joiner.php?id=34757 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [20/Aug/2026:14:07:24 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [20/Aug/2026:14:07:25 +1000] "GET /heartbeat.php?sentAt=1787198845&bytes=106,134,125,125&_=1787198745009 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [20/Aug/2026:14:07:26 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:14:07:25 +1000] "GET /heartbeat.php?sentAt=1787198843&bytes=106,134,125,123&_=1787174402138 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [20/Aug/2026:14:07:31 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-08-20 14:05:18 L1=2.75 run=6 blk=0 avail=6479 (55.2%) swpO=0 conn=4 myRSS=2817 php=2 phpRSS=107 ap=43 tcp=37 topuser=madalice 2026-08-20 14:05:19 L1=2.75 run=3 blk=0 avail=6432 (54.8%) swpO=0 conn=3 myRSS=2817 php=2 phpRSS=167 ap=42 tcp=40 topuser=madalice 2026-08-20 14:05:28 L1=2.55 run=2 blk=0 avail=6522 (55.6%) swpO=0 conn=4 myRSS=2817 php=1 phpRSS=23 ap=42 tcp=44 topuser=evolution 2026-08-20 14:05:29 L1=2.55 run=4 blk=0 avail=6505 (55.5%) swpO=0 conn=1 myRSS=2817 php=0 phpRSS=0 ap=42 tcp=53 topuser=- 2026-08-20 14:05:38 L1=2.38 run=1 blk=0 avail=6521 (55.6%) swpO=0 conn=4 myRSS=2817 php=1 phpRSS=12 ap=44 tcp=52 topuser=evolution 2026-08-20 14:05:39 L1=2.38 run=3 blk=0 avail=6496 (55.4%) swpO=0 conn=1 myRSS=2817 php=1 phpRSS=40 ap=48 tcp=58 topuser=evolution 2026-08-20 14:05:48 L1=2.24 run=1 blk=0 avail=6367 (54.3%) swpO=1 conn=1 myRSS=2817 php=0 phpRSS=0 ap=66 tcp=42 topuser=- 2026-08-20 14:05:49 L1=2.24 run=3 blk=0 avail=6337 (54.0%) swpO=1 conn=1 myRSS=2817 php=1 phpRSS=63 ap=65 tcp=43 topuser=speedlin 2026-08-20 14:05:58 L1=2.29 run=4 blk=0 avail=6320 (53.9%) swpO=0 conn=1 myRSS=2817 php=6 phpRSS=299 ap=57 tcp=43 topuser=evolution 2026-08-20 14:05:59 L1=2.29 run=3 blk=0 avail=6410 (54.7%) swpO=0 conn=1 myRSS=2817 php=2 phpRSS=93 ap=56 tcp=44 topuser=alison 2026-08-20 14:06:08 L1=2.32 run=3 blk=0 avail=6465 (55.1%) swpO=0 conn=1 myRSS=2817 php=0 phpRSS=0 ap=47 tcp=41 topuser=- 2026-08-20 14:06:09 L1=2.32 run=3 blk=0 avail=6468 (55.1%) swpO=0 conn=1 myRSS=2817 php=2 phpRSS=99 ap=46 tcp=37 topuser=evolution 2026-08-20 14:06:18 L1=2.35 run=1 blk=1 avail=6397 (54.5%) swpO=0 conn=1 myRSS=2817 php=1 phpRSS=140 ap=43 tcp=50 topuser=evolution 2026-08-20 14:06:19 L1=2.35 run=4 blk=0 avail=6437 (54.9%) swpO=0 conn=1 myRSS=2817 php=3 phpRSS=146 ap=43 tcp=49 topuser=alison 2026-08-20 14:06:29 L1=2.45 run=3 blk=0 avail=6395 (54.5%) swpO=0 conn=1 myRSS=2822 php=2 phpRSS=162 ap=43 tcp=44 topuser=madalice 2026-08-20 14:06:29 L1=2.45 run=4 blk=0 avail=6265 (53.4%) swpO=0 conn=4 myRSS=2822 php=3 phpRSS=331 ap=43 tcp=44 topuser=evolution 2026-08-20 14:06:39 L1=2.31 run=2 blk=0 avail=6491 (55.3%) swpO=0 conn=1 myRSS=2822 php=1 phpRSS=48 ap=44 tcp=47 topuser=evolution 2026-08-20 14:06:39 L1=2.31 run=4 blk=0 avail=6346 (54.1%) swpO=0 conn=4 myRSS=2822 php=2 phpRSS=225 ap=44 tcp=48 topuser=evolution 2026-08-20 14:06:49 L1=2.11 run=3 blk=0 avail=6413 (54.7%) swpO=0 conn=3 myRSS=2822 php=2 phpRSS=181 ap=41 tcp=36 topuser=alison 2026-08-20 14:06:49 L1=2.11 run=6 blk=0 avail=6220 (53.0%) swpO=0 conn=4 myRSS=2822 php=5 phpRSS=475 ap=41 tcp=40 topuser=alison 2026-08-20 14:06:59 L1=2.09 run=6 blk=0 avail=6102 (52.0%) swpO=0 conn=3 myRSS=2822 php=6 phpRSS=650 ap=39 tcp=43 topuser=madalice 2026-08-20 14:06:59 L1=2.09 run=5 blk=0 avail=6067 (51.7%) swpO=0 conn=4 myRSS=2822 php=7 phpRSS=707 ap=39 tcp=44 topuser=alison 2026-08-20 14:07:09 L1=2.00 run=5 blk=0 avail=6221 (53.0%) swpO=0 conn=3 myRSS=2822 php=4 phpRSS=461 ap=38 tcp=45 topuser=corpkicks 2026-08-20 14:07:09 L1=2.00 run=5 blk=0 avail=6250 (53.3%) swpO=0 conn=4 myRSS=2822 php=3 phpRSS=399 ap=38 tcp=42 topuser=corpkicks 2026-08-20 14:07:19 L1=1.85 run=3 blk=0 avail=6558 (55.9%) swpO=0 conn=3 myRSS=2822 php=1 phpRSS=42 ap=36 tcp=51 topuser=evolution 2026-08-20 14:07:19 L1=1.85 run=2 blk=0 avail=6467 (55.1%) swpO=0 conn=4 myRSS=2822 php=1 phpRSS=128 ap=37 tcp=45 topuser=evolution 2026-08-20 14:07:29 L1=2.04 run=1 blk=0 avail=6516 (55.6%) swpO=0 conn=3 myRSS=2823 php=0 phpRSS=0 ap=43 tcp=50 topuser=- 2026-08-20 14:07:29 L1=2.04 run=2 blk=0 avail=6476 (55.2%) swpO=0 conn=2 myRSS=2823 php=1 phpRSS=74 ap=42 tcp=48 topuser=evolution 2026-08-20 14:07:39 L1=3.09 run=5 blk=0 avail=6179 (52.7%) swpO=2141 conn=5 myRSS=2763 php=4 phpRSS=376 ap=71 tcp=83 topuser=madalice 2026-08-20 14:07:39 L1=3.09 run=9 blk=1 avail=6087 (51.9%) swpO=2141 conn=6 myRSS=2763 php=5 phpRSS=502 ap=71 tcp=84 topuser=madalice