INCIDENT 2026-09-03 12:17:36 trigger: swapout=2063/s php_procs=29 php_rss=2830MB mysql_conn=16 ================================================================== load: 3.83 2.36 2.19 22/764 3720060 ncpu:10 mem_avail: 6020MB/13777MB (43.7%) swap_used:1553MB swapout:2063/s blocked(D):0 running:24 iowait:0.1% steal:0.0% php: 29 procs / 2830MB heaviest user: corpkicks (8 procs, 1668MB) apache: 80 procs tcp_estab: 108 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2790 corpkicks 8 1720 nobody 87 1393 root 247 980 evolution 25 755 netdata 8 238 customc 1 139 madalice 1 135 olympic 1 125 wp-toolkit 3 70 cpanellogin 1 66 mailman 20 27 dovenull 6 25 polkitd 1 13 kurri 1 11 zabbix 1 10 named 1 6 dovecot 3 6 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB corpkicks 8 1728 evolution 17 741 customc 1 141 madalice 1 135 olympic 1 126 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5174 MB Active(file): 2881 MB Inactive(file): 2288 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 506 MB CommitLimit: 10984 MB Committed_AS: 12400 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 2-09:55:08 4556 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2857296 15.0 Rsl 22:03:23 /usr/sbin/mariadbd 3719995 3718956 corpkicks 279160 82.0 R 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3719972 3719935 corpkicks 274856 52.3 R 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3720000 3718391 corpkicks 273524 76.0 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3719977 3719936 corpkicks 264024 45.6 R 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3719998 3691427 corpkicks 212476 55.0 R 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1596047 1543747 root 199500 0.1 S 09:39:48 spamd child 3719999 3719889 corpkicks 184416 43.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3720007 3719402 corpkicks 179632 88.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1542443 1 netdata 171768 2.5 Ssl 09:55:13 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3720005 3718652 corpkicks 171744 77.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3720008 3690991 customc 154896 84.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3719953 1542510 madalice 138764 41.7 R 00:04 php-fpm: pool madalice_com_au 1596048 1543747 root 127084 0.0 S 09:39:48 spamd child 1543747 1 root 119188 0.0 Ss 09:54:43 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3719871 3718938 evolution 74012 6.2 S 00:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719957 3719422 evolution 72200 5.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719884 3718641 evolution 69024 4.1 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3689900 1353308 cpanellogin 68328 0.0 S 05:55 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 3720004 3718650 evolution 68196 18.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509266 1 root 52556 0.0 Ss 6-09:57:54 /usr/lib/systemd/systemd-journald 509236 509098 root 46460 0.0 Sl 6-09:57:54 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42184 0.1 Ss 43-09:36:20 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41836 0.1 Sl 09:55:09 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1542487 1 wp-toolkit 40952 0.0 Ss 09:55:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3719892 3705818 evolution 40936 0.3 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 40128 0.1 Ss 66-02:07:49 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3720023 3718639 evolution 39752 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719896 3719877 evolution 39744 0.3 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719966 3719934 evolution 39624 1.3 S 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719895 3719876 evolution 39608 0.3 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719956 3719890 evolution 39456 0.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719994 3718960 evolution 39412 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719981 3719888 evolution 39224 1.3 S 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719949 3718939 evolution 39128 0.7 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719988 3719982 evolution 39076 1.5 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3719962 3719421 evolution 38924 0.7 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3720021 1469 root 38352 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3720058 1469 root 38348 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3720020 1469 root 34616 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542072 1 root 31732 0.0 Ss 09:55:17 lfd - sleeping 1542510 1 root 29132 0.0 Ss 09:55:12 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542141 1 root 24848 0.0 Ss 09:55:16 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1542531 1 wp-toolkit 24796 0.0 Ss 09:55:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1542188 1 root 23960 0.1 Ssl 09:55:15 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 23720 0.0 Ss 66-02:07:49 tailwatchd 3688607 506832 nobody 22824 0.0 S 07:14 /usr/sbin/httpd -k start 3718641 506832 nobody 22284 0.1 S 01:07 /usr/sbin/httpd -k start 3692177 506832 nobody 22076 0.1 S 03:50 /usr/sbin/httpd -k start 3692010 506832 nobody 21924 0.0 S 03:57 /usr/sbin/httpd -k start 3705818 506832 nobody 21868 0.1 S 02:11 /usr/sbin/httpd -k start 3691427 506832 nobody 21252 0.1 S 04:26 /usr/sbin/httpd -k start 3688739 506832 nobody 21228 0.0 S 07:08 /usr/sbin/httpd -k start 3718335 506832 nobody 20756 0.1 S 01:25 /usr/sbin/httpd -k start 3718654 506832 nobody 20536 0.2 S 01:06 /usr/sbin/httpd -k start 3718960 506832 nobody 20308 0.0 S 00:51 /usr/sbin/httpd -k start 3690991 506832 nobody 20220 0.0 S 04:44 /usr/sbin/httpd -k start 3718396 506832 nobody 20196 0.0 S 01:22 /usr/sbin/httpd -k start 3705816 506832 nobody 20076 0.0 S 02:11 /usr/sbin/httpd -k start 3703382 506832 nobody 19836 0.0 S 02:13 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+---------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+---------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4716051 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 4716049 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 4716048 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 4715979 | root | 85-1559715131 | Execute | 0 | Sending data | SELECT GROUP_CONCAT(DISTINCT srcid) as d FROM stockmovement WHERE src = ? AND type = ? AND jobitemid IN (SELECT id FROM jobInventory WHERE jobid = ?) ORDER BY srcid | +---------+----------------------+---------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 672 customkidscom/customkids.com.au-ssl_log 319 evolution/portal.evolutionerp.com.au-ssl_log 287 lowrange/lowrange.com.au-ssl_log 161 infinium/infinium.net.au 133 evolution/app.evolutionerp.com.au-ssl_log 114 aaa/aaadownunder.com.au-ssl_log 87 aaa/aaadownunder.com.au 35 customc/customcentral.com.au-ssl_log 21 corpkicks/corporatekicks.com.au-ssl_log 17 infinium/infinium.net.au-ssl_log 4 madalice/madalice.com.au-ssl_log 2 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 564 203.54.180.238 318 45.148.10.246 237 103.104.165.99 161 45.148.10.12 137 130.12.180.117 114 40.115.94.245 81 20.48.250.41 59 103.104.164.114 37 180.181.236.49 27 213.209.159.133 24 150.228.151.47 24 120.150.225.142 10 183.234.57.243 9 203.123.106.115 7 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 189 POST /functions.php 113 GET /app/ajax.php 93 GET /factory_session_checker.php 90 GET /heartbeat.php 61 GET /index.php 57 GET /api/getItem/LWPB2001KG 46 GET /factory_session_processed_qty.php 46 GET /factory_session_joiner.php 41 GET //app/ajax.php 39 POST /wordpress/ 39 POST /plugins/csvexporter/plugin.php 39 GET / 26 POST /wordpress/index.php 25 POST //functions.php 22 POST /clienteditsave.php 22 POST / 21 POST /wp/ 21 POST /blog/ 18 POST //clienteditsave.php 18 POST /app/ajax/selectFilterSingle.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 189 POST /functions.php 113 GET /app/ajax.php 53 GET /index.php 41 GET //app/ajax.php 39 POST /plugins/csvexporter/plugin.php 25 POST //functions.php 22 POST /clienteditsave.php 18 POST //clienteditsave.php 18 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 14 POST /jobeditsave.php 14 GET //index.php -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:12:17:28 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 9899 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [03/Sep/2026:12:17:30 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1576 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:30 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1070 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 103.104.165.99 - - [03/Sep/2026:12:17:31 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=12089&tab=quotestab" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [03/Sep/2026:12:17:31 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1070 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:31 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1070 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 103.104.165.99 - - [03/Sep/2026:12:17:32 +1000] "GET //modalload.php?key=quotenotes&id=36812 HTTP/1.1" 200 3335 "https://my.evolutionerp.com.au//index.php?page=quotedit"eid=36812" "Mozilla/5.0 (Windows NT 10.0; Win64 203.54.180.238 - - [03/Sep/2026:12:17:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29256&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [03/Sep/2026:12:17:35 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 983 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=4252" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb == customkidscom/customkids.com.au-ssl_log == -- top paths -- 22 POST / 21 POST /wp/ 21 POST /wordpress/ 17 POST /register 16 POST /login 15 POST /admin 14 POST /wp/index.php 14 POST /wordpress/index.php 14 POST /signup 14 POST /api/auth/signin 12 POST /signin 11 POST /account -- last 10 requests -- 45.148.10.246 - - [03/Sep/2026:12:17:32 +1000] "POST /wordpress/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:33 +1000] "POST /wordpress/?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:33 +1000] "POST /wordpress/?rest_route=/batch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:33 +1000] "POST /wordpress/?rest_route=/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:34 +1000] "POST /wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:34 +1000] "POST /wordpress/wp-json/Batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:34 +1000] "POST /wordpress//wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:35 +1000] "POST /wordpress/wp-json/batch/v1/ HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:35 +1000] "POST /wordpress/blog/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 45.148.10.246 - - [03/Sep/2026:12:17:36 +1000] "POST /wordpress/wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.customkids.com.au/wordpress/wp-admin/" "WordPress/6.4.3" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 93 GET /factory_session_checker.php 90 GET /heartbeat.php 46 GET /factory_session_processed_qty.php 46 GET /factory_session_joiner.php 7 GET /index.php 4 POST /portal/register 1 GET / -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:12:17:28 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:28 +1000] "GET /heartbeat.php?sentAt=1788401846&bytes=106,152,216,182&_=1788387674139 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [03/Sep/2026:12:17:29 +1000] "GET / HTTP/1.1" 200 4941 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 203.54.180.238 - - [03/Sep/2026:12:17:29 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Saf 203.54.180.238 - - [03/Sep/2026:12:17:31 +1000] "GET /index.php?page=dispatches HTTP/1.1" 200 51884 "https://portal.evolutionerp.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 203.54.180.238 - - [03/Sep/2026:12:17:32 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=dispatches" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Ge 203.54.180.238 - - [03/Sep/2026:12:17:32 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:33 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:33 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:12:17:34 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-09-03 12:15:10 L1=2.25 run=2 blk=0 avail=8231 (59.7%) swpO=0 conn=2 myRSS=2814 php=4 phpRSS=253 ap=41 tcp=49 topuser=customc 2026-09-03 12:15:15 L1=2.15 run=1 blk=0 avail=8354 (60.6%) swpO=0 conn=3 myRSS=2814 php=4 phpRSS=140 ap=39 tcp=52 topuser=evolution 2026-09-03 12:15:20 L1=2.14 run=3 blk=0 avail=8305 (60.3%) swpO=0 conn=2 myRSS=2815 php=5 phpRSS=209 ap=40 tcp=43 topuser=evolution 2026-09-03 12:15:25 L1=1.97 run=2 blk=0 avail=8346 (60.6%) swpO=0 conn=3 myRSS=2815 php=3 phpRSS=69 ap=47 tcp=60 topuser=evolution 2026-09-03 12:15:30 L1=2.05 run=2 blk=0 avail=8210 (59.6%) swpO=0 conn=2 myRSS=2815 php=3 phpRSS=163 ap=54 tcp=54 topuser=madalice 2026-09-03 12:15:36 L1=2.04 run=1 blk=0 avail=8235 (59.8%) swpO=0 conn=3 myRSS=2815 php=4 phpRSS=204 ap=50 tcp=46 topuser=madalice 2026-09-03 12:15:40 L1=1.88 run=2 blk=0 avail=8271 (60.0%) swpO=0 conn=1 myRSS=2815 php=4 phpRSS=199 ap=46 tcp=50 topuser=madalice 2026-09-03 12:15:46 L1=1.73 run=1 blk=0 avail=8214 (59.6%) swpO=0 conn=3 myRSS=2815 php=5 phpRSS=270 ap=44 tcp=52 topuser=madalice 2026-09-03 12:15:50 L1=1.59 run=1 blk=0 avail=8406 (61.0%) swpO=0 conn=1 myRSS=2815 php=2 phpRSS=30 ap=42 tcp=45 topuser=root 2026-09-03 12:15:56 L1=1.46 run=1 blk=0 avail=8407 (61.0%) swpO=0 conn=3 myRSS=2815 php=3 phpRSS=70 ap=40 tcp=36 topuser=evolution 2026-09-03 12:16:00 L1=1.35 run=2 blk=0 avail=8452 (61.4%) swpO=0 conn=1 myRSS=2815 php=2 phpRSS=30 ap=36 tcp=40 topuser=root 2026-09-03 12:16:06 L1=1.24 run=3 blk=0 avail=8418 (61.1%) swpO=0 conn=3 myRSS=2815 php=3 phpRSS=70 ap=38 tcp=45 topuser=evolution 2026-09-03 12:16:10 L1=1.22 run=3 blk=0 avail=8338 (60.5%) swpO=0 conn=1 myRSS=2815 php=6 phpRSS=246 ap=38 tcp=42 topuser=evolution 2026-09-03 12:16:16 L1=1.44 run=2 blk=0 avail=8284 (60.1%) swpO=0 conn=3 myRSS=2815 php=5 phpRSS=178 ap=53 tcp=59 topuser=evolution 2026-09-03 12:16:20 L1=1.41 run=2 blk=0 avail=8305 (60.3%) swpO=0 conn=1 myRSS=2815 php=4 phpRSS=138 ap=51 tcp=43 topuser=evolution 2026-09-03 12:16:26 L1=1.61 run=4 blk=0 avail=8370 (60.8%) swpO=0 conn=3 myRSS=2815 php=4 phpRSS=103 ap=46 tcp=50 topuser=evolution 2026-09-03 12:16:30 L1=1.48 run=3 blk=0 avail=8055 (58.5%) swpO=0 conn=1 myRSS=2815 php=4 phpRSS=347 ap=60 tcp=51 topuser=corpkicks 2026-09-03 12:16:36 L1=1.53 run=3 blk=0 avail=8272 (60.0%) swpO=0 conn=3 myRSS=2815 php=7 phpRSS=220 ap=56 tcp=46 topuser=evolution 2026-09-03 12:16:40 L1=1.80 run=4 blk=0 avail=8303 (60.3%) swpO=0 conn=2 myRSS=2815 php=3 phpRSS=96 ap=52 tcp=57 topuser=evolution 2026-09-03 12:16:46 L1=2.14 run=3 blk=0 avail=8154 (59.2%) swpO=0 conn=3 myRSS=2815 php=7 phpRSS=254 ap=67 tcp=63 topuser=evolution 2026-09-03 12:16:51 L1=2.05 run=2 blk=0 avail=8243 (59.8%) swpO=0 conn=2 myRSS=2815 php=2 phpRSS=30 ap=65 tcp=69 topuser=root 2026-09-03 12:16:56 L1=2.13 run=3 blk=0 avail=8247 (59.9%) swpO=0 conn=3 myRSS=2815 php=3 phpRSS=70 ap=63 tcp=52 topuser=evolution 2026-09-03 12:17:01 L1=2.52 run=7 blk=0 avail=8224 (59.7%) swpO=0 conn=2 myRSS=2815 php=6 phpRSS=216 ap=58 tcp=59 topuser=evolution 2026-09-03 12:17:06 L1=2.56 run=6 blk=0 avail=8248 (59.9%) swpO=0 conn=3 myRSS=2815 php=5 phpRSS=179 ap=54 tcp=62 topuser=evolution 2026-09-03 12:17:11 L1=2.51 run=6 blk=0 avail=7788 (56.5%) swpO=0 conn=2 myRSS=2815 php=12 phpRSS=755 ap=60 tcp=66 topuser=evolution 2026-09-03 12:17:16 L1=2.47 run=2 blk=0 avail=8094 (58.8%) swpO=0 conn=3 myRSS=2815 php=4 phpRSS=200 ap=67 tcp=75 topuser=olympic 2026-09-03 12:17:21 L1=2.51 run=3 blk=0 avail=8154 (59.2%) swpO=0 conn=2 myRSS=2815 php=6 phpRSS=209 ap=65 tcp=58 topuser=evolution 2026-09-03 12:17:26 L1=2.47 run=2 blk=0 avail=8246 (59.9%) swpO=0 conn=3 myRSS=2815 php=4 phpRSS=111 ap=60 tcp=51 topuser=olympic 2026-09-03 12:17:31 L1=2.51 run=8 blk=0 avail=7917 (57.5%) swpO=0 conn=2 myRSS=2815 php=13 phpRSS=645 ap=65 tcp=81 topuser=evolution 2026-09-03 12:17:36 L1=3.83 run=24 blk=0 avail=6020 (43.7%) swpO=2063 conn=16 myRSS=2790 php=29 phpRSS=2830 ap=80 tcp=108 topuser=corpkicks