INCIDENT 2026-08-26 21:57:21 trigger: php_rss=2412MB ================================================================== load: 2.28 1.54 1.43 6/657 2901348 ncpu:10 mem_avail: 5468MB/11729MB (46.6%) swap_used:2491MB swapout:0/s blocked(D):0 running:6 iowait:0.0% steal:0.0% php: 11 procs / 2412MB heaviest user: corpkicks (11 procs, 2412MB) apache: 25 procs tcp_estab: 40 --- RSS by user (all processes) --- USER PROCS RSS_MB corpkicks 12 2463 mysql 1 2002 root 237 617 nobody 25 454 netdata 8 262 mailman 20 62 cpanellogin 1 57 dovenull 6 37 alison 2 23 wp-toolkit 6 20 dovecot 3 16 zabbix 1 14 kurri 1 7 evolution 6 7 named 1 5 nscd 1 3 cpanelconnecttrack 1 3 mailnull 1 2 dbus 1 2 polkitd 1 1 --- php workers by user --- USER PROCS RSS_MB corpkicks 11 2456 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4044 MB Active(file): 3018 MB Inactive(file): 1239 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 294 MB CommitLimit: 9960 MB Committed_AS: 8939 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2703186 root 20:46:04 764 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2362432 1 mysql 2050188 15.5 Ssl 1-18:26:04 /usr/sbin/mariadbd 2901278 2899534 corpkicks 294636 38.2 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901292 2899718 corpkicks 263476 69.0 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901286 2901164 corpkicks 260332 68.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901291 2883248 corpkicks 259016 66.0 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901290 2883157 corpkicks 253272 65.0 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901303 2883300 corpkicks 212556 97.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1220 1 netdata 201356 2.5 Ssl 58-11:47:30 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2901306 2900112 corpkicks 199368 90.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901311 2901214 corpkicks 195572 86.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901309 2900012 corpkicks 190892 84.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2901313 2899533 corpkicks 178380 75.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1065018 2938778 root 166976 0.1 S 08:45:16 spamd child 2575382 1 root 110632 0.0 Ss 11-14:06:51 /usr/lib/systemd/systemd-journald 2956399 2938778 root 85908 0.0 S 19:27:22 spamd child 2938778 1 root 70152 0.0 Ss 19:33:52 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2244622 1353308 cpanellogin 59164 0.0 S 03:14:44 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 4922 2431 netdata 44540 0.1 Sl 58-11:47:25 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2223 1201 root 32260 0.0 Sl 58-11:47:29 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2899533 1276780 nobody 24316 0.2 S 01:59 /usr/sbin/httpd -k start 2885228 1276780 nobody 22968 0.1 S 02:50 /usr/sbin/httpd -k start 2899718 1276780 nobody 22516 0.1 S 01:46 /usr/sbin/httpd -k start 2899759 1276780 nobody 22452 0.2 S 01:43 /usr/sbin/httpd -k start 2899534 1276780 nobody 22416 0.1 S 01:59 /usr/sbin/httpd -k start 2883248 1276780 nobody 21976 0.0 S 05:08 /usr/sbin/httpd -k start 2883300 1276780 nobody 21668 0.0 S 05:06 /usr/sbin/httpd -k start 2900012 1276780 nobody 21424 0.1 S 01:30 /usr/sbin/httpd -k start 2883157 1276780 nobody 21344 0.0 S 05:16 /usr/sbin/httpd -k start 2900007 1276780 nobody 21164 0.1 S 01:30 /usr/sbin/httpd -k start 2900660 1276780 nobody 21080 0.2 S 00:44 /usr/sbin/httpd -k start 2899969 1276780 nobody 20500 0.1 S 01:31 /usr/sbin/httpd -k start 185104 2431 netdata 20356 2.1 Sl 14-01:23:48 /usr/libexec/netdata/plugins.d/apps.plugin 1 2885172 1276780 nobody 19228 0.2 S 02:52 /usr/sbin/httpd -k start 2900112 1276780 nobody 18660 0.0 S 01:24 /usr/sbin/httpd -k start 2885185 1276780 nobody 18564 0.0 S 02:51 /usr/sbin/httpd -k start 2901164 1276780 nobody 18536 0.3 S 00:12 /usr/sbin/httpd -k start 2900813 1276780 nobody 18428 0.1 S 00:35 /usr/sbin/httpd -k start 2900011 1276780 nobody 17708 0.0 S 01:30 /usr/sbin/httpd -k start 2900969 1276780 nobody 17632 0.1 S 00:25 /usr/sbin/httpd -k start 2901165 1276780 nobody 16196 0.0 S 00:12 /usr/sbin/httpd -k start 2901214 1276780 nobody 16108 0.0 S 00:09 /usr/sbin/httpd -k start 2901154 1276780 nobody 15972 0.0 S 00:13 /usr/sbin/httpd -k start 1353308 1 root 15488 0.0 Ss 35-19:16:00 cpsrvd (SSL) - waiting for connections 1204 1 zabbix 15240 0.2 Ssl 58-11:47:30 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2901381 1276780 nobody 14928 0.0 S 00:00 /usr/sbin/httpd -k start 1463 1 root 14528 0.0 Ss 58-11:47:29 tailwatchd 2901098 3828812 corpkicks 14492 0.0 S 00:17 dovecot/imap 2899831 3828812 alison 13576 0.0 S 01:39 dovecot/quota-status -p postfix 2815862 3828812 root 13312 0.0 S 24:59 dovecot/auth -w 2885544 3828812 root 12936 0.0 S 02:24 dovecot/auth -w 2938201 1 root 11964 0.0 Ss 19:34:26 lfd - sleeping 1469 1 root 11760 0.1 Ss 58-11:47:29 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2560907 3828812 alison 10228 0.0 S 01:42:05 dovecot/imap 1780156 3828812 dovenull 10188 0.0 S 1-21:24:30 dovecot/imap-login 3360268 1471 root 9320 0.0 S 17:28:31 cPhulkd - dbprocessor 1780152 3828812 dovenull 8980 0.0 S 1-21:24:30 dovecot/imap-login 1471 1 root 8248 0.0 Ss 58-11:47:29 cPhulkd - processor 1780162 3828812 dovecot 8176 0.0 S 1-21:24:30 dovecot/auth 1466 1 root 7680 0.0 Ss 58-11:47:29 dnsadmin - dormant mode 1795692 3828812 kurri 7192 0.0 S 1-21:21:47 dovecot/imap --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8944954 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min nrg/nrgservices.net.au-ssl_log 266 evolution/evolutionerp.com.au 145 evolution/evolutionerp.com.au-ssl_log 145 evolution/my.evolutionerp.com.au-ssl_log 115 cosgrovecreative/cosgrovecreative.com.au-ssl_log 91 alison/alisonarts.com.au-ssl_log 84 olympic/olympicfencing.com.au-ssl_log 67 vinesit/vinesit.com.au-ssl_log 40 corpkicks/corporatekicks.com.au-ssl_log 37 evolution/portal.evolutionerp.com.au-ssl_log 19 bigdeals/bigdeals.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 7 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 288 146.70.117.223 266 68.155.159.216 118 52.139.37.240 108 175.36.227.212 92 158.23.184.117 62 136.108.88.147 43 202.153.211.134 19 203.54.180.238 14 20.104.18.15 11 118.127.40.55 2 49.233.45.47 2 34.196.51.17 2 170.106.152.218 1 93.87.18.116 1 91.92.243.239 --- top request paths across all vhosts (last 3 min) --- 35 GET /app/ajax.php 24 POST /functions.php 19 GET /heartbeat.php 14 GET /index.php 11 POST /wp-admin/admin-ajax.php 11 POST /app/ajax.php 9 POST /plugins/csvexporter/plugin.php 9 GET /wp-json/wc-admin/options 6 POST /wp-cron.php 6 GET / 5 POST /app/ajax/selectFilterSingle.php 5 GET /wp-json/wc-analytics/admin/notes 4 POST /clienteditsave.php 4 POST /app/ajax/selectFilter.php 4 GET /wp-json/wc-admin/onboarding/tasks 4 GET /wp-admin/edit.php 3 POST /opportunityeditsave.php 3 GET /wp.php 3 GET /wp-mail.php 3 GET /wp-login.php --- busiest 3 vhosts: top paths + last 10 requests --- == nrg/nrgservices.net.au-ssl_log == -- top paths -- 1 GET /xxx.php 1 GET /xx.php 1 GET /xpw.php 1 GET /x.php 1 GET /xmlrpc.php 1 GET /ws.php 1 GET /wp-trackback.php 1 GET /wp-signup.php 1 GET /wp-seo.php 1 GET /wp.php 1 GET /wp-mail.php 1 GET /wp-login.php -- last 10 requests -- 68.155.159.216 - - [26/Aug/2026:21:57:03 +1000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:04 +1000] "GET /ws.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:05 +1000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:05 +1000] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:05 +1000] "GET /wp-mail.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:06 +1000] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:06 +1000] "GET /wp-admin/images/index.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:07 +1000] "GET /wp-trackback.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:07 +1000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 5749 "-" "-" 68.155.159.216 - - [26/Aug/2026:21:57:08 +1000] "GET /wp-admin/index.php HTTP/1.1" 404 5749 "-" "-" == evolution/evolutionerp.com.au == -- top paths -- 1 GET /wp-includes/sodium_compat/namespaced/File.php 1 GET /wp-includes/sodium_compat/namespaced/Crypto.php 1 GET /wp-includes/sodium_compat/namespaced/Core/XChaCha20.php 1 GET /wp-includes/sodium_compat/namespaced/Core/Util.php 1 GET /wp-includes/sodium_compat/namespaced/Core/SipHash.php 1 GET /wp-includes/sodium_compat/namespaced/Core/Salsa20.php 1 GET /wp-includes/sodium_compat/namespaced/Core/Curve25519.php 1 GET /wp-includes/sodium_compat/namespaced/Core/BLAKE2b.php 1 GET /wp-includes/sodium_compat/namespaced/Core/ 1 GET /wp-includes/sodium_compat/namespaced/Compat.php 1 GET /wp-includes/sodium_compat/namespaced/ 1 GET /wp-includes/sodium_compat/lib/stream-xchacha20.php -- last 10 requests -- 146.70.117.223 - - [26/Aug/2026:21:56:44 +1000] "GET /wp-includes/sodium_compat/namespaced/Compat.php HTTP/1.1" 301 328 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:44 +1000] "GET /wp-includes/sodium_compat/namespaced/File.php HTTP/1.1" 301 326 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:46 +1000] "GET /wp-includes/sodium_compat/namespaced/Crypto.php HTTP/1.1" 301 328 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:47 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 323 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:48 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/Util.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:49 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/Salsa20.php HTTP/1.1" 301 334 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:52 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/BLAKE2b.php HTTP/1.1" 301 334 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:53 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/SipHash.php HTTP/1.1" 301 334 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:54 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/XChaCha20.php HTTP/1.1" 301 336 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:56 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519.php HTTP/1.1" 301 337 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 1 POST /wp-cron.php 1 GET /wp-json/gravitysmtp/v1/tests/mock-data 1 GET /wp-includes/sodium_compat/namespaced/File.php 1 GET /wp-includes/sodium_compat/namespaced/Crypto.php 1 GET /wp-includes/sodium_compat/namespaced/Core/Util.php 1 GET /wp-includes/sodium_compat/namespaced/Core/Salsa20.php 1 GET /wp-includes/sodium_compat/namespaced/Core/BLAKE2b.php 1 GET /wp-includes/sodium_compat/namespaced/Core/ 1 GET /wp-includes/sodium_compat/namespaced/Compat.php 1 GET /wp-includes/sodium_compat/namespaced/ 1 GET /wp-includes/sodium_compat/lib/stream-xchacha20.php 1 GET /wp-includes/sodium_compat/lib/sodium_compat.php -- last 10 requests -- 146.70.117.223 - - [26/Aug/2026:21:56:43 +1000] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 200 1428 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:44 +1000] "GET /wp-includes/sodium_compat/namespaced/Compat.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:45 +1000] "GET /wp-includes/sodium_compat/namespaced/File.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 118.127.40.55 - - [26/Aug/2026:21:56:45 +1000] "POST /wp-cron.php?doing_wp_cron=1787745405.7491409778594970703125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://evolutionerp.com.au" 198.186.131.177 - - [26/Aug/2026:21:56:44 +1000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 114 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" 146.70.117.223 - - [26/Aug/2026:21:56:47 +1000] "GET /wp-includes/sodium_compat/namespaced/Crypto.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:48 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 200 3611 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:49 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/Util.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:51 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/Salsa20.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 146.70.117.223 - - [26/Aug/2026:21:56:53 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/BLAKE2b.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" --- last 30 samples (run-up to this incident) --- 2026-08-26 21:54:55 L1=0.38 run=2 blk=0 avail=7630 (65.1%) swpO=0 conn=3 myRSS=1978 php=2 phpRSS=99 ap=18 tcp=23 topuser=alison 2026-08-26 21:55:00 L1=0.35 run=4 blk=0 avail=7661 (65.3%) swpO=0 conn=1 myRSS=1978 php=0 phpRSS=0 ap=18 tcp=25 topuser=- 2026-08-26 21:55:05 L1=0.48 run=5 blk=0 avail=7544 (64.3%) swpO=0 conn=3 myRSS=1978 php=2 phpRSS=164 ap=18 tcp=26 topuser=infinium 2026-08-26 21:55:10 L1=0.68 run=6 blk=0 avail=7256 (61.9%) swpO=0 conn=1 myRSS=1978 php=3 phpRSS=486 ap=19 tcp=31 topuser=corpkicks 2026-08-26 21:55:15 L1=0.63 run=3 blk=0 avail=7402 (63.1%) swpO=0 conn=3 myRSS=1978 php=2 phpRSS=303 ap=20 tcp=32 topuser=madalice 2026-08-26 21:55:20 L1=0.58 run=2 blk=0 avail=7619 (65.0%) swpO=0 conn=1 myRSS=1979 php=0 phpRSS=0 ap=23 tcp=32 topuser=- 2026-08-26 21:55:25 L1=0.53 run=6 blk=0 avail=7456 (63.6%) swpO=0 conn=3 myRSS=1979 php=4 phpRSS=242 ap=26 tcp=33 topuser=evolution 2026-08-26 21:55:30 L1=0.81 run=1 blk=0 avail=7572 (64.6%) swpO=0 conn=1 myRSS=2000 php=1 phpRSS=14 ap=26 tcp=34 topuser=olympic 2026-08-26 21:55:35 L1=0.82 run=5 blk=0 avail=7346 (62.6%) swpO=0 conn=3 myRSS=2000 php=3 phpRSS=311 ap=29 tcp=38 topuser=madalice 2026-08-26 21:55:40 L1=0.76 run=1 blk=0 avail=7550 (64.4%) swpO=0 conn=1 myRSS=2000 php=0 phpRSS=0 ap=30 tcp=26 topuser=- 2026-08-26 21:55:45 L1=0.78 run=1 blk=0 avail=7571 (64.6%) swpO=0 conn=3 myRSS=2000 php=1 phpRSS=40 ap=26 tcp=24 topuser=evolution 2026-08-26 21:55:50 L1=1.28 run=17 blk=0 avail=6858 (58.5%) swpO=0 conn=1 myRSS=2001 php=9 phpRSS=929 ap=30 tcp=47 topuser=olympic 2026-08-26 21:55:55 L1=1.65 run=8 blk=0 avail=6911 (58.9%) swpO=0 conn=8 myRSS=2001 php=8 phpRSS=805 ap=38 tcp=39 topuser=olympic 2026-08-26 21:56:00 L1=2.64 run=11 blk=0 avail=6964 (59.4%) swpO=1 conn=1 myRSS=2002 php=7 phpRSS=727 ap=39 tcp=40 topuser=olympic 2026-08-26 21:56:05 L1=2.51 run=1 blk=0 avail=7485 (63.8%) swpO=1 conn=8 myRSS=2002 php=1 phpRSS=39 ap=37 tcp=35 topuser=evolution 2026-08-26 21:56:10 L1=2.39 run=1 blk=0 avail=7529 (64.2%) swpO=0 conn=1 myRSS=2002 php=0 phpRSS=0 ap=32 tcp=25 topuser=- 2026-08-26 21:56:15 L1=2.36 run=2 blk=1 avail=7244 (61.8%) swpO=0 conn=8 myRSS=2002 php=3 phpRSS=405 ap=27 tcp=29 topuser=corpkicks 2026-08-26 21:56:20 L1=2.33 run=2 blk=0 avail=7339 (62.6%) swpO=0 conn=2 myRSS=2002 php=1 phpRSS=232 ap=29 tcp=26 topuser=corpkicks 2026-08-26 21:56:25 L1=2.22 run=1 blk=0 avail=7546 (64.3%) swpO=0 conn=8 myRSS=2002 php=1 phpRSS=40 ap=26 tcp=25 topuser=evolution 2026-08-26 21:56:30 L1=2.12 run=5 blk=0 avail=7523 (64.1%) swpO=0 conn=2 myRSS=2002 php=5 phpRSS=223 ap=23 tcp=27 topuser=corpkicks 2026-08-26 21:56:35 L1=1.95 run=2 blk=0 avail=7343 (62.6%) swpO=0 conn=8 myRSS=2002 php=2 phpRSS=309 ap=22 tcp=29 topuser=corpkicks 2026-08-26 21:56:40 L1=2.04 run=1 blk=0 avail=7590 (64.7%) swpO=0 conn=2 myRSS=2002 php=0 phpRSS=0 ap=23 tcp=24 topuser=- 2026-08-26 21:56:45 L1=1.87 run=3 blk=0 avail=7212 (61.5%) swpO=0 conn=8 myRSS=2002 php=3 phpRSS=442 ap=23 tcp=25 topuser=corpkicks 2026-08-26 21:56:50 L1=2.37 run=8 blk=0 avail=7239 (61.7%) swpO=0 conn=2 myRSS=2002 php=2 phpRSS=384 ap=24 tcp=28 topuser=corpkicks 2026-08-26 21:56:55 L1=2.26 run=2 blk=0 avail=7525 (64.2%) swpO=0 conn=2 myRSS=2002 php=1 phpRSS=69 ap=24 tcp=24 topuser=evolution 2026-08-26 21:57:01 L1=2.40 run=3 blk=0 avail=7404 (63.1%) swpO=0 conn=2 myRSS=2002 php=1 phpRSS=187 ap=25 tcp=26 topuser=madalice 2026-08-26 21:57:05 L1=2.36 run=1 blk=0 avail=7565 (64.5%) swpO=0 conn=2 myRSS=2002 php=0 phpRSS=0 ap=24 tcp=23 topuser=- 2026-08-26 21:57:11 L1=2.33 run=2 blk=0 avail=7463 (63.6%) swpO=1 conn=2 myRSS=2002 php=1 phpRSS=129 ap=25 tcp=29 topuser=madalice 2026-08-26 21:57:15 L1=2.31 run=2 blk=0 avail=7517 (64.1%) swpO=1 conn=2 myRSS=2002 php=1 phpRSS=72 ap=26 tcp=26 topuser=alison 2026-08-26 21:57:21 L1=2.28 run=6 blk=0 avail=5468 (46.6%) swpO=0 conn=12 myRSS=2002 php=11 phpRSS=2412 ap=25 tcp=40 topuser=corpkicks