INCIDENT 2026-08-26 12:20:07 trigger: php_rss=1752MB ================================================================== load: 3.60 2.72 2.32 15/720 872667 ncpu:10 mem_avail: 4684MB/11729MB (39.9%) swap_used:1297MB swapout:23/s blocked(D):0 running:13 iowait:0.8% steal:0.0% php: 16 procs / 1752MB heaviest user: madalice (8 procs, 1410MB) apache: 131 procs tcp_estab: 44 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2393 nobody 130 2284 madalice 7 1065 root 242 902 evolution 16 298 netdata 8 253 mailman 20 250 cpanellogin 1 75 dovenull 6 47 wp-toolkit 6 20 dovecot 3 17 alison 1 14 zabbix 1 12 mailnull 2 10 kurri 1 7 named 1 6 nscd 1 4 dbus 1 3 cpanelconnecttrack 1 3 polkitd 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 6 960 evolution 6 265 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4807 MB Active(file): 2944 MB Inactive(file): 1332 MB Dirty: 157 MB Writeback: 0 MB SReclaimable: 431 MB CommitLimit: 9960 MB Committed_AS: 10506 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 867575 root 00:06 3268 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 2703186 root 11:08:50 7116 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2362432 1 mysql 2450700 15.7 Ssl 1-08:48:50 /usr/sbin/mariadbd 870187 865213 madalice 255504 119 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 870634 865349 madalice 243176 106 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 196440 2.5 Ssl 58-02:10:16 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2956397 2938778 root 186956 0.1 S 09:50:08 spamd child 871345 866939 madalice 178872 82.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2956399 2938778 root 148220 0.0 S 09:50:08 spamd child 2575382 1 root 126276 0.0 Ss 11-04:29:37 /usr/lib/systemd/systemd-journald 872105 865139 madalice 120260 104 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2938778 1 root 107568 0.0 Ss 09:56:38 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 32709 1353308 cpanellogin 77380 0.0 S 03:42:29 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 867381 867125 evolution 67112 0.6 S 00:22 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867521 866941 evolution 43176 0.4 S 00:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867388 865816 evolution 41208 0.0 S 00:21 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 40444 0.0 Sl 58-02:10:15 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 867520 866937 evolution 40264 0.4 S 00:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867447 867217 evolution 40228 0.1 S 00:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867456 866720 evolution 40188 0.1 S 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 35208 0.0 Ss 35-09:38:46 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 33604 0.1 Sl 58-02:10:11 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 30712 0.1 Ss 58-02:10:15 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1463 1 root 24072 0.0 Ss 58-02:10:15 tailwatchd 849113 1276780 nobody 23652 0.0 S 05:30 /usr/sbin/httpd -k start 849121 1276780 nobody 23276 0.1 S 05:30 /usr/sbin/httpd -k start 2938201 1 root 22964 0.0 Ss 09:57:12 lfd - sleeping 845622 1276780 nobody 22532 0.0 S 08:31 /usr/sbin/httpd -k start 866682 1276780 nobody 22524 0.2 S 00:59 /usr/sbin/httpd -k start 849016 1276780 nobody 22356 0.0 S 05:31 /usr/sbin/httpd -k start 864786 1276780 nobody 22272 0.0 S 03:09 /usr/sbin/httpd -k start 848912 1276780 nobody 22128 0.0 S 05:34 /usr/sbin/httpd -k start 848293 1276780 nobody 21972 0.0 S 06:11 /usr/sbin/httpd -k start 849035 1276780 nobody 21772 0.0 S 05:31 /usr/sbin/httpd -k start 849107 1276780 nobody 21764 0.0 S 05:30 /usr/sbin/httpd -k start 864651 1276780 nobody 21392 0.0 S 03:17 /usr/sbin/httpd -k start 865139 1276780 nobody 21336 0.0 S 02:47 /usr/sbin/httpd -k start 866683 1276780 nobody 21196 0.1 S 00:59 /usr/sbin/httpd -k start 847351 1276780 nobody 21172 0.0 S 07:30 /usr/sbin/httpd -k start 185104 2431 netdata 20984 2.1 Sl 13-15:46:34 /usr/libexec/netdata/plugins.d/apps.plugin 1 849123 1276780 nobody 20864 0.0 S 05:30 /usr/sbin/httpd -k start 865820 1276780 nobody 20860 0.0 S 01:59 /usr/sbin/httpd -k start 866725 1276780 nobody 20804 0.0 S 00:58 /usr/sbin/httpd -k start 866944 1276780 nobody 20640 0.2 S 00:41 /usr/sbin/httpd -k start 865349 1276780 nobody 20620 0.0 S 02:31 /usr/sbin/httpd -k start 866634 1276780 nobody 20620 0.0 S 01:01 /usr/sbin/httpd -k start 865803 1276780 nobody 20580 0.0 S 02:00 /usr/sbin/httpd -k start 865213 1276780 nobody 20516 0.0 S 02:41 /usr/sbin/httpd -k start 866916 1276780 nobody 20336 0.1 S 00:42 /usr/sbin/httpd -k start 865813 1276780 nobody 20280 0.0 S 01:59 /usr/sbin/httpd -k start 866139 1276780 nobody 20280 0.0 S 01:35 /usr/sbin/httpd -k start 866726 1276780 nobody 20020 0.0 S 00:58 /usr/sbin/httpd -k start 865801 1276780 nobody 19940 0.0 S 02:00 /usr/sbin/httpd -k start 866680 1276780 nobody 19924 0.0 S 00:59 /usr/sbin/httpd -k start 866142 1276780 nobody 19616 0.0 S 01:35 /usr/sbin/httpd -k start 866456 1276780 nobody 19616 0.0 S 01:11 /usr/sbin/httpd -k start 866159 1276780 nobody 19612 0.0 S 01:34 /usr/sbin/httpd -k start 866897 1276780 nobody 19600 0.0 S 00:45 /usr/sbin/httpd -k start 866424 1276780 nobody 19572 0.0 S 01:14 /usr/sbin/httpd -k start 866920 1276780 nobody 19544 0.0 S 00:42 /usr/sbin/httpd -k start 866915 1276780 nobody 19504 0.0 S 00:42 /usr/sbin/httpd -k start 866457 1276780 nobody 19472 0.0 S 01:11 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7018201 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 7018190 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT count(purchases.id) as c FROM purchases LEFT JOIN contacts ON contacts.clientid=purchases.supplierid LEFT JOIN staff ON staff.id = purchases.staffid LEFT JOIN emailConfirmations ON emailConfirmations.tableid = purchases.id AND emailConfirmations.module = 'purchaseorder' where (contacts.co | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 519 evolution/portal.evolutionerp.com.au-ssl_log 202 vinesit/westpanel.vinesit.com.au-ssl_log 67 vinesit/westpanel.vinesit.com.au 65 madalice/madalice.com.au-ssl_log 35 aaa/aaadownunder.com.au-ssl_log 18 evolution/evolutionerp.com.au 13 olympic/olympicfencing.com.au-ssl_log 3 corpkicks/corporatekicks.com.au-ssl_log 2 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 376 203.54.180.238 135 103.104.165.99 132 4.204.200.136 81 150.228.163.253 76 103.104.164.114 27 2001:8004:14b3:854f:1498:95de:b1fa:17b5 22 203.40.84.196 20 180.181.236.49 13 169.58.209.109 13 1.144.107.82 6 147.161.215.89 3 4.199.143.134 2 216.73.216.31 2 182.239.240.254 2 165.225.115.140 --- top request paths across all vhosts (last 3 min) --- 208 POST /functions.php 93 GET /app/ajax.php 75 GET /factory_session_checker.php 48 GET /heartbeat.php 41 GET /index.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 31 POST /plugins/csvexporter/plugin.php 14 POST /app/ajax/selectFilterSingle.php 14 POST /app/ajax.php 12 POST /quoteditsave.php 12 GET //app/ajax.php 10 POST //functions.php 10 POST /clienteditsave.php 9 POST /inveditsave.php 7 POST /print.php 6 POST /purchaseaddsave.php 5 GET /store/black-nike-air-forces-drippy-custom-shoes/ 4 POST //jobeditsave.php 4 POST //clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 208 POST /functions.php 93 GET /app/ajax.php 41 GET /index.php 31 POST /plugins/csvexporter/plugin.php 14 POST /app/ajax/selectFilterSingle.php 14 POST /app/ajax.php 12 POST /quoteditsave.php 12 GET //app/ajax.php 10 POST //functions.php 10 POST /clienteditsave.php 9 POST /inveditsave.php 7 POST /print.php -- last 10 requests -- 203.54.180.238 - - [26/Aug/2026:12:19:52 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [26/Aug/2026:12:19:52 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [26/Aug/2026:12:19:52 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au//index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [26/Aug/2026:12:19:53 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78783§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [26/Aug/2026:12:19:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 101.182.108.127 - - [26/Aug/2026:12:19:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=76292" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [26/Aug/2026:12:19:57 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78746" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 203.54.180.238 - - [26/Aug/2026:12:19:57 +1000] "POST /mfreqsave.php?shopOrderDetailSave=1 HTTP/1.1" 302 52 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43829" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "GET /index.php?page=mfshoporderdetail&id=43829 HTTP/1.1" 200 32035 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43829" "Mozilla/5.0 (Windows NT 10.0 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43829" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 75 GET /factory_session_checker.php 48 GET /heartbeat.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 123 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "GET /factory_session_joiner.php?id=34884 HTTP/1.1" 200 98 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "GET /factory_session_joiner.php?id=34880 HTTP/1.1" 200 91 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [26/Aug/2026:12:19:59 +1000] "GET /heartbeat.php?sentAt=1787710799&bytes=106,142,77,79&_=1787662770909 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [26/Aug/2026:12:20:00 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [26/Aug/2026:12:20:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [26/Aug/2026:12:20:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [26/Aug/2026:12:20:02 +1000] "GET /factory_session_joiner.php?id=34870 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [26/Aug/2026:12:20:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == vinesit/westpanel.vinesit.com.au-ssl_log == -- top paths -- 2 GET /admin.php 2 GET /about.php 2 GET /aaa.php 1 GET /yj09.php 1 GET /wp-ws68.php 1 GET /wp-theme.php 1 GET /wp-login.php 1 GET /wp-load.php 1 GET /wp-includes/Text/ 1 GET /wp-includes/Requests/ 1 GET /wp-includes/l10n/ 1 GET /wp-includes/js/jquery/ -- last 10 requests -- 4.204.200.136 - - [26/Aug/2026:12:19:25 +1000] "GET /wp-content/admin.php HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:26 +1000] "GET /wp-content/themes/index.php HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:27 +1000] "GET /wp-includes/blocks/details/ HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:28 +1000] "GET /.well-known/about.php HTTP/1.1" 403 12 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:28 +1000] "GET /wp-includes/ID3/about.php HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:29 +1000] "GET /wp-includes/Text/ HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:30 +1000] "GET /ts.php HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:30 +1000] "GET /bak.php HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:32 +1000] "GET /olik.php HTTP/1.1" 500 718 "-" "-" 4.204.200.136 - - [26/Aug/2026:12:19:33 +1000] "GET /about.php HTTP/1.1" 500 718 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-26 12:17:38 L1=2.51 run=3 blk=0 avail=6331 (54.0%) swpO=0 conn=1 myRSS=2419 php=8 phpRSS=398 ap=58 tcp=72 topuser=evolution 2026-08-26 12:17:46 L1=2.47 run=1 blk=0 avail=6473 (55.2%) swpO=0 conn=3 myRSS=2419 php=2 phpRSS=60 ap=60 tcp=37 topuser=evolution 2026-08-26 12:17:48 L1=2.43 run=1 blk=0 avail=6517 (55.6%) swpO=0 conn=1 myRSS=2419 php=0 phpRSS=0 ap=58 tcp=37 topuser=- 2026-08-26 12:17:56 L1=2.23 run=2 blk=0 avail=6520 (55.6%) swpO=0 conn=3 myRSS=2419 php=3 phpRSS=144 ap=50 tcp=38 topuser=evolution 2026-08-26 12:17:58 L1=2.29 run=5 blk=0 avail=6546 (55.8%) swpO=0 conn=1 myRSS=2419 php=4 phpRSS=164 ap=48 tcp=39 topuser=evolution 2026-08-26 12:18:06 L1=3.01 run=7 blk=0 avail=6462 (55.1%) swpO=0 conn=3 myRSS=2419 php=6 phpRSS=271 ap=47 tcp=53 topuser=evolution 2026-08-26 12:18:08 L1=3.01 run=4 blk=0 avail=6391 (54.5%) swpO=0 conn=1 myRSS=2419 php=4 phpRSS=225 ap=59 tcp=64 topuser=evolution 2026-08-26 12:18:16 L1=3.08 run=2 blk=0 avail=6480 (55.3%) swpO=0 conn=3 myRSS=2419 php=3 phpRSS=156 ap=53 tcp=45 topuser=evolution 2026-08-26 12:18:18 L1=3.08 run=1 blk=0 avail=6520 (55.6%) swpO=0 conn=1 myRSS=2419 php=1 phpRSS=66 ap=52 tcp=50 topuser=evolution 2026-08-26 12:18:26 L1=2.76 run=2 blk=0 avail=6615 (56.4%) swpO=1 conn=3 myRSS=2419 php=4 phpRSS=23 ap=44 tcp=45 topuser=evolution 2026-08-26 12:18:28 L1=2.76 run=2 blk=0 avail=6521 (55.6%) swpO=1 conn=2 myRSS=2419 php=1 phpRSS=142 ap=43 tcp=48 topuser=speedlin 2026-08-26 12:18:36 L1=2.79 run=3 blk=0 avail=6337 (54.0%) swpO=0 conn=3 myRSS=2419 php=2 phpRSS=251 ap=56 tcp=51 topuser=madalice 2026-08-26 12:18:38 L1=2.79 run=4 blk=0 avail=6518 (55.6%) swpO=0 conn=2 myRSS=2419 php=1 phpRSS=52 ap=54 tcp=48 topuser=evolution 2026-08-26 12:18:46 L1=2.89 run=3 blk=0 avail=6517 (55.6%) swpO=0 conn=3 myRSS=2419 php=3 phpRSS=142 ap=50 tcp=45 topuser=evolution 2026-08-26 12:18:48 L1=2.89 run=4 blk=0 avail=6558 (55.9%) swpO=0 conn=2 myRSS=2419 php=1 phpRSS=71 ap=49 tcp=43 topuser=evolution 2026-08-26 12:18:56 L1=2.59 run=4 blk=0 avail=6562 (55.9%) swpO=0 conn=3 myRSS=2419 php=1 phpRSS=42 ap=51 tcp=49 topuser=evolution 2026-08-26 12:18:58 L1=2.59 run=2 blk=0 avail=6565 (56.0%) swpO=0 conn=2 myRSS=2419 php=1 phpRSS=33 ap=51 tcp=48 topuser=evolution 2026-08-26 12:19:06 L1=2.50 run=5 blk=0 avail=6273 (53.5%) swpO=0 conn=3 myRSS=2419 php=3 phpRSS=385 ap=50 tcp=65 topuser=corpkicks 2026-08-26 12:19:08 L1=2.50 run=4 blk=0 avail=6195 (52.8%) swpO=0 conn=2 myRSS=2419 php=3 phpRSS=430 ap=56 tcp=63 topuser=corpkicks 2026-08-26 12:19:16 L1=2.50 run=2 blk=0 avail=6460 (55.1%) swpO=0 conn=2 myRSS=2419 php=1 phpRSS=117 ap=60 tcp=49 topuser=madalice 2026-08-26 12:19:18 L1=2.50 run=7 blk=0 avail=6172 (52.6%) swpO=0 conn=2 myRSS=2419 php=4 phpRSS=523 ap=58 tcp=44 topuser=madalice 2026-08-26 12:19:26 L1=2.49 run=5 blk=0 avail=6203 (52.9%) swpO=0 conn=2 myRSS=2419 php=7 phpRSS=363 ap=87 tcp=82 topuser=evolution 2026-08-26 12:19:28 L1=2.49 run=4 blk=0 avail=6104 (52.0%) swpO=2 conn=3 myRSS=2419 php=3 phpRSS=351 ap=86 tcp=74 topuser=madalice 2026-08-26 12:19:36 L1=2.40 run=1 blk=0 avail=6389 (54.5%) swpO=2 conn=2 myRSS=2419 php=0 phpRSS=0 ap=82 tcp=123 topuser=- 2026-08-26 12:19:38 L1=2.40 run=2 blk=0 avail=6300 (53.7%) swpO=0 conn=3 myRSS=2419 php=0 phpRSS=0 ap=94 tcp=125 topuser=- 2026-08-26 12:19:46 L1=2.50 run=2 blk=0 avail=5893 (50.2%) swpO=937 conn=2 myRSS=2400 php=2 phpRSS=105 ap=152 tcp=83 topuser=evolution 2026-08-26 12:19:49 L1=2.50 run=9 blk=0 avail=4981 (42.5%) swpO=1369 conn=3 myRSS=2395 php=9 phpRSS=1271 ap=150 tcp=106 topuser=madalice 2026-08-26 12:19:56 L1=2.66 run=12 blk=0 avail=5553 (47.3%) swpO=1004 conn=2 myRSS=2394 php=11 phpRSS=813 ap=142 tcp=54 topuser=madalice 2026-08-26 12:19:59 L1=2.66 run=4 blk=0 avail=5918 (50.5%) swpO=462 conn=3 myRSS=2393 php=8 phpRSS=371 ap=139 tcp=47 topuser=evolution 2026-08-26 12:20:07 L1=3.60 run=13 blk=0 avail=4684 (39.9%) swpO=23 conn=9 myRSS=2393 php=16 phpRSS=1752 ap=131 tcp=44 topuser=madalice