INCIDENT 2026-08-31 14:01:04 trigger: php_rss=1739MB ================================================================== load: 5.92 3.21 2.55 12/708 1367015 ncpu:10 mem_avail: 6356MB/13777MB (46.1%) swap_used:2208MB swapout:50/s blocked(D):0 running:14 iowait:0.2% steal:0.0% php: 15 procs / 1739MB heaviest user: corpkicks (6 procs, 1321MB) apache: 72 procs tcp_estab: 72 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3436 nobody 71 1232 corpkicks 6 1021 root 250 881 evolution 12 233 netdata 7 205 madalice 1 133 cpanellogin 1 84 alison 2 77 mailman 20 72 mailnull 3 47 dovenull 6 46 wp-toolkit 3 20 zabbix 1 19 dovecot 3 18 vinesit 1 14 kurri 1 12 named 1 11 nscd 1 4 polkitd 1 3 --- php workers by user --- USER PROCS RSS_MB corpkicks 4 870 evolution 6 215 madalice 1 133 alison 1 64 root 1 21 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4970 MB Active(file): 4351 MB Inactive(file): 837 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 600 MB CommitLimit: 10984 MB Committed_AS: 9288 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 3-11:42:25 4100 /usr/bin/imunify-agent-proxy 1351280 root 01:03 1244 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3519040 9.0 Ssl 3-11:41:54 /usr/sbin/mariadbd 1366937 1366924 corpkicks 230772 59.5 R 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1366940 1366927 corpkicks 218980 111 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1366939 1365586 corpkicks 200368 106 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 508924 1 netdata 185720 1.9 Ssl 3-11:41:23 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1247229 3002570 root 167092 0.2 S 30:55 spamd child 1366743 510022 madalice 136368 16.1 S 00:09 php-fpm: pool madalice_com_au 3002570 1 root 119612 0.0 Ss 11:38:18 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3036528 3002570 root 116748 0.0 S 11:29:22 spamd child 873062 1353308 cpanellogin 86788 0.0 S 02:09:46 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1366960 1354278 alison 69820 29.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509640 508992 root 66060 0.0 Sl 3-11:41:18 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 509266 1 root 63736 0.0 Ss 3-11:41:20 /usr/lib/systemd/systemd-journald 509236 509098 root 47324 0.0 Sl 3-11:41:20 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1366959 1351262 evolution 43200 6.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1366965 1365543 evolution 42928 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 41808 0.1 Ss 40-11:19:46 cpsrvd (SSL) - waiting for connections 1366956 1366925 evolution 40688 5.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1366944 1348791 evolution 40560 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3001917 1 root 33648 0.0 Ss 11:38:50 lfd - sleeping 1343946 506832 nobody 23292 0.0 S 05:54 /usr/sbin/httpd -k start 1348817 506832 nobody 23108 0.0 S 03:34 /usr/sbin/httpd -k start 1463 1 root 22716 0.0 Ss 63-03:51:15 tailwatchd 1348819 506832 nobody 22708 0.0 S 03:34 /usr/sbin/httpd -k start 1349552 506832 nobody 22444 0.1 S 02:47 /usr/sbin/httpd -k start 510022 1 root 22396 0.0 Ss 3-11:41:16 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1350512 506832 nobody 22008 0.1 S 01:43 /usr/sbin/httpd -k start 1348818 506832 nobody 21864 0.1 S 03:34 /usr/sbin/httpd -k start 1345431 506832 nobody 21428 0.0 S 05:53 /usr/sbin/httpd -k start 1349017 506832 nobody 21424 0.0 S 03:23 /usr/sbin/httpd -k start 1350529 506832 nobody 21404 0.0 S 01:42 /usr/sbin/httpd -k start 1346968 506832 nobody 21380 0.0 S 05:24 /usr/sbin/httpd -k start 1350347 506832 nobody 21380 0.0 S 01:53 /usr/sbin/httpd -k start 1348791 506832 nobody 21260 0.0 S 03:35 /usr/sbin/httpd -k start 1350554 506832 nobody 21192 0.0 S 01:41 /usr/sbin/httpd -k start 1469 1 root 21080 0.1 Ss 63-03:51:15 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1350906 506832 nobody 21016 0.0 S 01:25 /usr/sbin/httpd -k start 1351411 506832 nobody 20912 0.0 S 01:02 /usr/sbin/httpd -k start 1349555 506832 nobody 20888 0.0 S 02:47 /usr/sbin/httpd -k start 1348767 506832 nobody 20864 0.0 S 03:36 /usr/sbin/httpd -k start 1365581 506832 nobody 20836 0.0 S 00:48 /usr/sbin/httpd -k start 1349103 506832 nobody 20760 0.0 S 03:21 /usr/sbin/httpd -k start 1365542 506832 nobody 20696 0.3 S 00:49 /usr/sbin/httpd -k start 1365591 506832 nobody 20520 0.1 S 00:48 /usr/sbin/httpd -k start 1367048 1365542 evolution 20492 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1349843 506832 nobody 20344 0.0 S 02:28 /usr/sbin/httpd -k start 1355620 506832 nobody 20312 0.5 S 00:58 /usr/sbin/httpd -k start 1350892 506832 nobody 20296 0.0 S 01:26 /usr/sbin/httpd -k start 1352833 506832 nobody 20240 0.1 S 01:00 /usr/sbin/httpd -k start 483898 1 zabbix 20132 0.2 Ssl 3-11:42:37 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1350560 506832 nobody 20116 0.0 S 01:41 /usr/sbin/httpd -k start 1349831 506832 nobody 20096 0.0 S 02:29 /usr/sbin/httpd -k start 1351262 506832 nobody 20096 0.0 S 01:03 /usr/sbin/httpd -k start 1365586 506832 nobody 20088 0.1 S 00:48 /usr/sbin/httpd -k start 1365543 506832 nobody 20072 0.1 S 00:49 /usr/sbin/httpd -k start 1355625 506832 nobody 20048 0.1 S 00:58 /usr/sbin/httpd -k start 1364789 506832 nobody 19964 0.0 S 00:52 /usr/sbin/httpd -k start 1365575 506832 nobody 19904 0.0 S 00:48 /usr/sbin/httpd -k start 1365584 506832 nobody 19736 0.0 S 00:48 /usr/sbin/httpd -k start 1350559 506832 nobody 19612 0.0 S 01:41 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8557164 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 737 evolution/my.evolutionerp.com.au-ssl_log 550 evolution/portal.evolutionerp.com.au-ssl_log 210 infinium/infinium.net.au-ssl_log 152 corpkicks/corporatekicks.com.au-ssl_log 101 nrg/nrgservices.net.au-ssl_log 78 otter2/otterfencing.net.au-ssl_log 35 customc/customcentral.com.au-ssl_log 33 speedlin/speedlinefencing.com.au-ssl_log 11 alison/alisonarts.com.au-ssl_log 7 tubesupplies/tubesupplies.com.au-ssl_log 1 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 737 40.115.94.245 301 203.54.180.238 152 4.232.148.111 110 103.104.164.114 100 103.104.165.99 94 195.178.110.103 77 150.228.243.152 69 185.236.78.29 52 101.166.96.210 46 165.225.233.87 45 182.239.240.254 39 20.48.160.90 35 1.144.107.82 32 35.189.108.215 9 45.79.134.247 --- top request paths across all vhosts (last 3 min) --- 189 POST /functions.php 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFB2001KG 104 GET /app/ajax.php 71 GET /factory_session_checker.php 69 POST /index.php 61 GET /index.php 54 GET /heartbeat.php 36 GET /factory_session_processed_qty.php 36 GET /factory_session_joiner.php 26 POST /plugins/csvexporter/plugin.php 23 POST /clienteditsave.php 23 POST /app/ajax/selectFilter.php 21 POST / 20 POST //functions.php 17 POST /inveditsave.php 17 GET /api/getItem/LWPG2001KG 16 POST /app/ajax/selectFilterSingle.php 13 POST /app/ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFB2001KG 17 GET /api/getItem/LWPG2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG757540-8 -- last 10 requests -- 40.115.94.245 - - [31/Aug/2026:14:00:59 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:00:59 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:00:59 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:00:59 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:00:59 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:01:00 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:01:00 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:01:00 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:01:00 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:14:01:00 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 189 POST /functions.php 104 GET /app/ajax.php 52 GET /index.php 26 POST /plugins/csvexporter/plugin.php 23 POST /clienteditsave.php 23 POST /app/ajax/selectFilter.php 20 POST //functions.php 17 POST /inveditsave.php 16 POST /app/ajax/selectFilterSingle.php 13 POST /app/ajax.php 7 POST /logsave.php 5 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 203.54.180.238 - - [31/Aug/2026:14:01:02 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dclientedit%26clientid%3D21002%26tab%3Dclienteditgeneral&call=getUserSetting&caller=ajaxSubmitLocal&seq=13263014305 HTTP/1.1" 200 103.104.165.99 - - [31/Aug/2026:14:01:02 +1000] "POST /inveditsave.php?call=filterStockMovement HTTP/1.1" 200 1767 "https://my.evolutionerp.com.au/index.php?page=invedithist&id=3953&string=" "Mozilla/5.0 (Windows NT 10.0 203.54.180.238 - - [31/Aug/2026:14:01:02 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 150.228.243.152 - - [31/Aug/2026:14:01:02 +1000] "GET /quoteditsave.php?itemid=4010&call=getKit&mode=true&discount=25&level=1 HTTP/1.1" 200 434 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=2035§ion 103.104.164.114 - - [31/Aug/2026:14:01:02 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19768929994 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 103.104.164.114 - - [31/Aug/2026:14:01:02 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Ddispatchedit%26dispatchid%3D5&call=getUserSetting&caller=ajaxSubmitLocal&seq=13204346352 HTTP/1.1" 200 113 "h 103.104.164.114 - - [31/Aug/2026:14:01:02 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=17430309738 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [31/Aug/2026:14:01:03 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Ddispatchedit%26dispatchid%3D5&call=getUserSetting&caller=ajaxSubmitLocal&seq=10209368000 HTTP/1.1" 200 101 "https://my.evolutio 150.228.243.152 - - [31/Aug/2026:14:01:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=2035§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [31/Aug/2026:14:01:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 71 GET /factory_session_checker.php 54 GET /heartbeat.php 36 GET /factory_session_processed_qty.php 36 GET /factory_session_joiner.php 7 GET /index.php 6 POST /portal/register -- last 10 requests -- 203.54.180.238 - - [31/Aug/2026:14:00:57 +1000] "GET /index.php?page=inventory_picking HTTP/1.1" 200 9600 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37952&seq=6701709040050" "Mozill 203.54.180.238 - - [31/Aug/2026:14:00:57 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=inventory_picking" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, 203.54.180.238 - - [31/Aug/2026:14:00:57 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:14:00:58 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [31/Aug/2026:14:00:58 +1000] "GET /factory_session_joiner.php?id=34982 HTTP/1.1" 200 92 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [31/Aug/2026:14:01:00 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:14:00:59 +1000] "GET /heartbeat.php?sentAt=1788148859&bytes=106,148,252,123&_=1788145735592 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [31/Aug/2026:14:01:01 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 123 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [31/Aug/2026:14:01:01 +1000] "GET /factory_session_joiner.php?id=34991 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [31/Aug/2026:14:01:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-08-31 13:58:43 L1=2.64 run=4 blk=0 avail=7482 (54.3%) swpO=0 conn=4 myRSS=3440 php=6 phpRSS=354 ap=68 tcp=62 topuser=madalice 2026-08-31 13:58:43 L1=2.64 run=3 blk=0 avail=7476 (54.3%) swpO=0 conn=3 myRSS=3440 php=6 phpRSS=359 ap=68 tcp=62 topuser=madalice 2026-08-31 13:58:53 L1=2.61 run=4 blk=0 avail=7568 (54.9%) swpO=0 conn=4 myRSS=3440 php=6 phpRSS=325 ap=58 tcp=54 topuser=madalice 2026-08-31 13:58:53 L1=2.61 run=3 blk=0 avail=7578 (55.0%) swpO=0 conn=3 myRSS=3440 php=6 phpRSS=330 ap=58 tcp=54 topuser=madalice 2026-08-31 13:59:03 L1=2.76 run=6 blk=0 avail=7242 (52.6%) swpO=3 conn=4 myRSS=3440 php=10 phpRSS=879 ap=49 tcp=56 topuser=corpkicks 2026-08-31 13:59:03 L1=2.76 run=4 blk=0 avail=7228 (52.5%) swpO=3 conn=3 myRSS=3440 php=8 phpRSS=809 ap=49 tcp=57 topuser=corpkicks 2026-08-31 13:59:13 L1=2.73 run=2 blk=0 avail=7670 (55.7%) swpO=0 conn=4 myRSS=3440 php=5 phpRSS=272 ap=51 tcp=56 topuser=madalice 2026-08-31 13:59:13 L1=2.73 run=2 blk=0 avail=7668 (55.7%) swpO=0 conn=3 myRSS=3440 php=5 phpRSS=272 ap=51 tcp=56 topuser=madalice 2026-08-31 13:59:23 L1=2.69 run=6 blk=0 avail=7473 (54.2%) swpO=0 conn=4 myRSS=3440 php=8 phpRSS=464 ap=62 tcp=69 topuser=evolution 2026-08-31 13:59:23 L1=2.69 run=10 blk=0 avail=7453 (54.1%) swpO=0 conn=6 myRSS=3440 php=9 phpRSS=511 ap=62 tcp=75 topuser=evolution 2026-08-31 13:59:33 L1=2.89 run=7 blk=0 avail=7645 (55.5%) swpO=0 conn=4 myRSS=3440 php=6 phpRSS=280 ap=56 tcp=50 topuser=evolution 2026-08-31 13:59:33 L1=2.89 run=3 blk=0 avail=7638 (55.4%) swpO=0 conn=6 myRSS=3440 php=5 phpRSS=271 ap=56 tcp=50 topuser=evolution 2026-08-31 13:59:43 L1=3.36 run=3 blk=0 avail=7481 (54.3%) swpO=0 conn=5 myRSS=3440 php=7 phpRSS=491 ap=54 tcp=40 topuser=speedlin 2026-08-31 13:59:43 L1=3.36 run=2 blk=0 avail=7475 (54.3%) swpO=0 conn=6 myRSS=3440 php=8 phpRSS=516 ap=54 tcp=42 topuser=speedlin 2026-08-31 13:59:53 L1=3.15 run=4 blk=0 avail=7640 (55.5%) swpO=0 conn=5 myRSS=3441 php=6 phpRSS=370 ap=44 tcp=44 topuser=madalice 2026-08-31 13:59:53 L1=3.15 run=2 blk=0 avail=7636 (55.4%) swpO=0 conn=6 myRSS=3441 php=5 phpRSS=342 ap=44 tcp=44 topuser=speedlin 2026-08-31 14:00:03 L1=3.22 run=8 blk=0 avail=7318 (53.1%) swpO=0 conn=5 myRSS=3441 php=10 phpRSS=785 ap=48 tcp=52 topuser=evolution 2026-08-31 14:00:03 L1=3.22 run=9 blk=0 avail=7312 (53.1%) swpO=0 conn=6 myRSS=3441 php=9 phpRSS=746 ap=48 tcp=52 topuser=evolution 2026-08-31 14:00:13 L1=3.27 run=9 blk=0 avail=7456 (54.1%) swpO=0 conn=5 myRSS=3441 php=9 phpRSS=504 ap=58 tcp=77 topuser=evolution 2026-08-31 14:00:13 L1=3.27 run=10 blk=0 avail=7463 (54.2%) swpO=0 conn=6 myRSS=3441 php=11 phpRSS=579 ap=58 tcp=77 topuser=evolution 2026-08-31 14:00:23 L1=3.67 run=2 blk=0 avail=7294 (52.9%) swpO=0 conn=5 myRSS=3440 php=8 phpRSS=443 ap=81 tcp=61 topuser=evolution 2026-08-31 14:00:23 L1=3.67 run=5 blk=0 avail=7287 (52.9%) swpO=0 conn=5 myRSS=3440 php=8 phpRSS=436 ap=81 tcp=61 topuser=evolution 2026-08-31 14:00:34 L1=3.34 run=3 blk=0 avail=7249 (52.6%) swpO=0 conn=5 myRSS=3440 php=7 phpRSS=547 ap=71 tcp=44 topuser=corpkicks 2026-08-31 14:00:34 L1=3.34 run=6 blk=0 avail=7241 (52.6%) swpO=0 conn=5 myRSS=3440 php=9 phpRSS=617 ap=71 tcp=44 topuser=corpkicks 2026-08-31 14:00:44 L1=3.76 run=12 blk=0 avail=7007 (50.9%) swpO=102 conn=5 myRSS=3437 php=14 phpRSS=842 ap=66 tcp=62 topuser=corpkicks 2026-08-31 14:00:44 L1=3.76 run=22 blk=0 avail=7014 (50.9%) swpO=102 conn=7 myRSS=3437 php=12 phpRSS=777 ap=66 tcp=64 topuser=corpkicks 2026-08-31 14:00:54 L1=3.80 run=2 blk=0 avail=7482 (54.3%) swpO=0 conn=5 myRSS=3437 php=5 phpRSS=172 ap=57 tcp=48 topuser=evolution 2026-08-31 14:00:54 L1=3.80 run=5 blk=0 avail=7470 (54.2%) swpO=0 conn=7 myRSS=3437 php=4 phpRSS=150 ap=57 tcp=48 topuser=alison 2026-08-31 14:01:04 L1=5.92 run=14 blk=0 avail=6422 (46.6%) swpO=50 conn=7 myRSS=3436 php=14 phpRSS=1496 ap=72 tcp=72 topuser=corpkicks 2026-08-31 14:01:04 L1=5.92 run=14 blk=0 avail=6356 (46.1%) swpO=50 conn=10 myRSS=3436 php=15 phpRSS=1739 ap=72 tcp=72 topuser=corpkicks