INCIDENT 2026-08-14 20:02:14 trigger: php_rss=1587MB mysql_conn=17 ================================================================== load: 1.80 1.11 0.87 20/667 2159859 ncpu:10 mem_avail: 5927MB/11729MB (50.5%) swap_used:1152MB swapout:69/s blocked(D):0 running:17 iowait:0.1% steal:0.0% php: 18 procs / 1587MB heaviest user: evolution (6 procs, 445MB) apache: 77 procs tcp_estab: 63 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2073 nobody 76 1083 root 240 929 evolution 10 522 infinium 3 304 netdata 8 267 tubesupplies 2 221 aaa 5 202 customc 1 160 alison 2 123 olympic 1 94 kurri 3 37 dovenull 6 28 wp-toolkit 6 19 mailnull 4 19 cpanellogin 1 18 mailman 20 14 zabbix 1 12 dovecot 3 8 named 1 6 --- php workers by user --- USER PROCS RSS_MB evolution 6 534 infinium 3 309 tubesupplies 2 224 customc 1 168 aaa 2 167 alison 1 112 olympic 1 96 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5559 MB Active(file): 4608 MB Inactive(file): 891 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 399 MB CommitLimit: 9960 MB Committed_AS: 9288 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 18:50:58 1992 /usr/bin/imunify-agent-proxy 2158460 root 02:13 1348 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 2123000 14.7 Ssl 18:23:13 /usr/sbin/mariadbd 1220 1 netdata 214872 2.5 Ssl 46-09:52:16 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451534 1444234 root 203688 0.0 S 17:25:07 spamd child 2159808 2159767 evolution 193960 56.5 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2159811 2159773 customc 189452 44.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 159820 1 root 167740 0.0 Ss 25-10:15:24 /usr/lib/systemd/systemd-journald 1910802 1444234 root 155648 0.0 S 06:33:40 spamd child 2159814 2159771 tubesupplies 128164 57.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2159818 2159774 alison 126276 97.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2159815 2159788 tubesupplies 119844 53.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2159819 2159776 infinium 117312 47.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2159823 2159778 evolution 113832 42.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2159821 2159768 olympic 108476 80.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2159833 2159784 evolution 101524 35.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1444234 1 root 97136 0.0 Ss 17:39:26 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2159830 2159783 evolution 94128 33.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2159826 2159781 aaa 78260 45.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2223 1201 root 64336 0.0 Sl 46-09:52:15 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41620 0.1 Ss 46-09:52:15 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41468 0.0 Ss 23-17:20:46 cpsrvd (SSL) - waiting for connections 2159837 2159741 evolution 40800 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2159822 2159786 evolution 40720 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 36992 0.1 Sl 46-09:52:11 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2159806 1353308 root 36256 0.0 S 00:02 webmaild - serving 93.123.109.122 1443709 1 root 25548 0.0 Ss 17:40:01 lfd - sleeping 2156508 1276780 nobody 21692 0.0 S 05:54 /usr/sbin/httpd -k start 2158147 1276780 nobody 19280 0.0 S 02:53 /usr/sbin/httpd -k start 2159367 1353308 cpanellogin 19024 0.0 S 00:50 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2158148 1276780 nobody 18748 0.0 S 02:53 /usr/sbin/httpd -k start 2157683 1276780 nobody 18732 0.0 S 03:58 /usr/sbin/httpd -k start 2158996 1276780 nobody 18504 0.0 S 01:20 /usr/sbin/httpd -k start 2159031 1276780 nobody 18272 0.0 S 01:17 /usr/sbin/httpd -k start 2158136 1276780 nobody 18188 0.0 S 02:54 /usr/sbin/httpd -k start 2158790 1276780 nobody 18172 0.0 S 01:48 /usr/sbin/httpd -k start 2158995 1276780 nobody 18040 0.0 S 01:20 /usr/sbin/httpd -k start 2158991 1276780 nobody 16924 0.0 S 01:21 /usr/sbin/httpd -k start 2159537 1276780 nobody 16372 0.0 S 00:24 /usr/sbin/httpd -k start 2159795 1276780 nobody 15880 0.0 S 00:03 /usr/sbin/httpd -k start 2159535 1276780 nobody 15712 0.0 S 00:25 /usr/sbin/httpd -k start 2159772 1276780 nobody 15672 0.0 S 00:03 /usr/sbin/httpd -k start 2159775 1276780 nobody 15648 0.0 S 00:03 /usr/sbin/httpd -k start 2159689 1276780 nobody 15608 0.1 S 00:07 /usr/sbin/httpd -k start 2159748 1276780 nobody 15496 0.2 S 00:04 /usr/sbin/httpd -k start 2159722 1276780 nobody 15440 0.1 S 00:06 /usr/sbin/httpd -k start 2159734 1276780 nobody 15432 0.2 S 00:05 /usr/sbin/httpd -k start 2159747 1276780 nobody 15432 0.2 S 00:04 /usr/sbin/httpd -k start 2159690 1276780 nobody 15428 0.1 S 00:07 /usr/sbin/httpd -k start 2159733 1276780 nobody 15404 0.2 S 00:05 /usr/sbin/httpd -k start 2159736 1276780 nobody 15380 0.0 S 00:05 /usr/sbin/httpd -k start 2159780 1276780 nobody 15380 0.0 S 00:03 /usr/sbin/httpd -k start 2159785 1276780 nobody 15376 0.0 S 00:03 /usr/sbin/httpd -k start 2159731 1276780 nobody 15372 0.0 S 00:05 /usr/sbin/httpd -k start 2159746 1276780 nobody 15372 0.0 S 00:04 /usr/sbin/httpd -k start 2159773 1276780 nobody 15368 0.0 S 00:03 /usr/sbin/httpd -k start 2159776 1276780 nobody 15364 0.0 S 00:03 /usr/sbin/httpd -k start 2159724 1276780 nobody 15360 0.0 S 00:06 /usr/sbin/httpd -k start 2159735 1276780 nobody 15356 0.0 S 00:05 /usr/sbin/httpd -k start 2159741 1276780 nobody 15344 0.0 S 00:04 /usr/sbin/httpd -k start 2159725 1276780 nobody 15324 0.0 S 00:06 /usr/sbin/httpd -k start 2159767 1276780 nobody 15304 0.3 S 00:03 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3881462 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min infinium/infinium.net.au-ssl_log 81 evolution/portal.evolutionerp.com.au-ssl_log 19 madalice/madalice.com.au-ssl_log 7 alison/alisonarts.com.au-ssl_log 3 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 67 62.60.130.235 19 203.54.180.238 14 118.127.40.55 2 121.229.156.100 1 84.233.195.157 1 223.109.252.198 1 114.119.143.104 1 114.119.137.101 1 114.119.131.88 1 109.53.142.177 1 103.155.18.120 1 103.100.225.91 --- top request paths across all vhosts (last 3 min) --- 43 GET /wp-admin/index.php 22 POST /wp-login.php 19 GET /heartbeat.php 11 POST / 3 POST /wp-cron.php 2 GET /wp-login.php 2 GET /store/harley-davidson-hand-painted-vans-sz11/ 2 GET / 1 GET /store/new-balance-550-cartoon/ 1 GET /store/hand-painted-vans-old-skool-roses/ 1 GET /store/adidas-superstar-cartoon-style/ 1 GET /red-candy-flames-2/ 1 GET /gallery/red-candy-flames/ 1 GET /gallery/futurama-custom-airbrushed-hard-hat/ --- busiest 3 vhosts: top paths + last 10 requests --- == infinium/infinium.net.au-ssl_log == -- top paths -- 43 GET /wp-admin/index.php 22 POST /wp-login.php 11 POST / 3 POST /wp-cron.php 2 GET /wp-login.php -- last 10 requests -- 118.127.40.55 - - [14/Aug/2026:20:01:47 +1000] "POST /?wordfence_syncAttackData=1786701707.8704 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://infinium.net.au" 62.60.130.235 - - [14/Aug/2026:20:01:47 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0. 62.60.130.235 - - [14/Aug/2026:20:01:48 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Finfinium.net.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 5802 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows 62.60.130.235 - - [14/Aug/2026:20:01:49 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0. 62.60.130.235 - - [14/Aug/2026:20:01:50 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Finfinium.net.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 5802 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows 62.60.130.235 - - [14/Aug/2026:20:01:51 +1000] "POST /wp-login.php HTTP/1.1" 503 18948 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0. 62.60.130.235 - - [14/Aug/2026:20:01:53 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18948 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515. 62.60.130.235 - - [14/Aug/2026:20:01:55 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18948 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515. 62.60.130.235 - - [14/Aug/2026:20:01:57 +1000] "POST /wp-login.php HTTP/1.1" 503 18035 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Sa 118.127.40.55 - - [14/Aug/2026:20:01:59 +1000] "POST /?wordfence_syncAttackData=1786701719.5247 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://infinium.net.au" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 19 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:20:00:44 +1000] "GET /heartbeat.php?sentAt=1786701644&bytes=106,126,231,76&_=1786686002185 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:20:00:53 +1000] "GET /heartbeat.php?sentAt=1786701653&bytes=106,126,231,85&_=1786683791215 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:20:00:54 +1000] "GET /heartbeat.php?sentAt=1786701654&bytes=106,126,231,86&_=1786686002186 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:20:01:03 +1000] "GET /heartbeat.php?sentAt=1786701663&bytes=106,126,231,95&_=1786683791216 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:20:01:04 +1000] "GET /heartbeat.php?sentAt=1786701664&bytes=106,126,231,96&_=1786686002187 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:20:01:13 +1000] "GET /heartbeat.php?sentAt=1786701673&bytes=106,126,231,105&_=1786683791217 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:20:01:14 +1000] "GET /heartbeat.php?sentAt=1786701674&bytes=106,126,231,106&_=1786686002188 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:20:01:23 +1000] "GET /heartbeat.php?sentAt=1786701683&bytes=106,126,231,115&_=1786683791218 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:20:01:24 +1000] "GET /heartbeat.php?sentAt=1786701684&bytes=106,126,231,116&_=1786686002189 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:20:01:33 +1000] "GET /heartbeat.php?sentAt=1786701693&bytes=106,126,231,125&_=1786683791219 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == madalice/madalice.com.au-ssl_log == -- top paths -- 2 GET /store/harley-davidson-hand-painted-vans-sz11/ 2 GET / 1 GET /store/new-balance-550-cartoon/ 1 GET /store/hand-painted-vans-old-skool-roses/ 1 GET /store/adidas-superstar-cartoon-style/ -- last 10 requests -- 114.119.131.88 - - [14/Aug/2026:20:00:24 +1000] "GET /store/harley-davidson-hand-painted-vans-sz11/?amp%3Bwcpr_page=4&wcpr_verified=1&wcpr_rating=2&image=1 HTTP/1.1" 404 30593 "https://madalice.com.au/store/harley-davids 103.100.225.91 - - [14/Aug/2026:20:00:25 +1000] "GET / HTTP/1.1" 200 36554 "-" "Mozilla/5.0 (compatible; SeedBot/1.0)" 103.155.18.120 - - [14/Aug/2026:20:00:44 +1000] "GET /store/new-balance-550-cartoon/?srsltid=AfmBOoqFGt-ocjxGVcsLNE1Z6WQyUFcSa6Sfpfr9k77dJ-UKmZBawU0X HTTP/1.1" 200 48463 "https://madalice.com.au" "Mozilla/5.0 (Windows NT 84.233.195.157 - - [14/Aug/2026:20:00:54 +1000] "GET / HTTP/1.1" 200 36555 "http://madalice.com.au:80" "Go-http-client/1.1" 114.119.143.104 - - [14/Aug/2026:20:00:56 +1000] "GET /store/harley-davidson-hand-painted-vans-sz11/?amp%3Brating=1&rating=1 HTTP/1.1" 404 30569 "https://madalice.com.au/store/harley-davidson-hand-painted-vans-sz11/?amp% 109.53.142.177 - - [14/Aug/2026:20:01:02 +1000] "GET /store/adidas-superstar-cartoon-style/ HTTP/1.1" 200 48314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 114.119.137.101 - - [14/Aug/2026:20:01:28 +1000] "GET /store/hand-painted-vans-old-skool-roses/?rating=5&wcpr_rating=1&wcpr_image=1 HTTP/1.1" 404 30572 "https://madalice.com.au/store/hand-painted-vans-old-skool-roses/?ra --- last 30 samples (run-up to this incident) --- 2026-08-14 19:59:47 L1=0.84 run=3 blk=0 avail=7208 (61.5%) swpO=0 conn=2 myRSS=2074 php=1 phpRSS=97 ap=25 tcp=27 topuser=madalice 2026-08-14 19:59:53 L1=1.01 run=2 blk=0 avail=7080 (60.4%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=291 ap=21 tcp=20 topuser=madalice 2026-08-14 19:59:57 L1=0.93 run=1 blk=0 avail=7306 (62.3%) swpO=0 conn=2 myRSS=2074 php=0 phpRSS=0 ap=20 tcp=19 topuser=- 2026-08-14 20:00:03 L1=0.93 run=2 blk=0 avail=7204 (61.4%) swpO=0 conn=3 myRSS=2074 php=4 phpRSS=231 ap=16 tcp=19 topuser=evolution 2026-08-14 20:00:07 L1=1.02 run=1 blk=0 avail=7250 (61.8%) swpO=0 conn=2 myRSS=2074 php=2 phpRSS=140 ap=16 tcp=23 topuser=evolution 2026-08-14 20:00:13 L1=0.94 run=1 blk=0 avail=7242 (61.7%) swpO=0 conn=3 myRSS=2074 php=3 phpRSS=180 ap=15 tcp=22 topuser=evolution 2026-08-14 20:00:17 L1=0.86 run=2 blk=0 avail=7251 (61.8%) swpO=0 conn=2 myRSS=2074 php=2 phpRSS=143 ap=15 tcp=22 topuser=evolution 2026-08-14 20:00:23 L1=0.87 run=4 blk=0 avail=7279 (62.1%) swpO=0 conn=3 myRSS=2074 php=4 phpRSS=241 ap=15 tcp=23 topuser=evolution 2026-08-14 20:00:27 L1=0.96 run=3 blk=0 avail=7300 (62.2%) swpO=0 conn=2 myRSS=2074 php=1 phpRSS=92 ap=16 tcp=25 topuser=evolution 2026-08-14 20:00:33 L1=0.97 run=1 blk=0 avail=7306 (62.3%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=132 ap=18 tcp=23 topuser=evolution 2026-08-14 20:00:37 L1=0.89 run=1 blk=0 avail=7315 (62.4%) swpO=0 conn=2 myRSS=2074 php=1 phpRSS=92 ap=18 tcp=23 topuser=evolution 2026-08-14 20:00:43 L1=0.82 run=4 blk=0 avail=7240 (61.7%) swpO=0 conn=3 myRSS=2074 php=4 phpRSS=277 ap=15 tcp=25 topuser=infinium 2026-08-14 20:00:48 L1=0.83 run=1 blk=0 avail=7343 (62.6%) swpO=0 conn=2 myRSS=2074 php=1 phpRSS=92 ap=15 tcp=25 topuser=evolution 2026-08-14 20:00:53 L1=0.77 run=1 blk=0 avail=7326 (62.5%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=133 ap=16 tcp=24 topuser=evolution 2026-08-14 20:00:58 L1=1.02 run=7 blk=0 avail=6793 (57.9%) swpO=0 conn=2 myRSS=2074 php=5 phpRSS=713 ap=20 tcp=30 topuser=madalice 2026-08-14 20:01:03 L1=0.94 run=2 blk=0 avail=7160 (61.0%) swpO=0 conn=3 myRSS=2074 php=3 phpRSS=273 ap=25 tcp=28 topuser=evolution 2026-08-14 20:01:08 L1=0.95 run=2 blk=0 avail=7206 (61.4%) swpO=0 conn=2 myRSS=2074 php=2 phpRSS=216 ap=23 tcp=25 topuser=corpkicks 2026-08-14 20:01:13 L1=0.95 run=2 blk=0 avail=7291 (62.2%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=139 ap=21 tcp=21 topuser=evolution 2026-08-14 20:01:18 L1=1.04 run=3 blk=0 avail=7212 (61.5%) swpO=0 conn=2 myRSS=2074 php=2 phpRSS=232 ap=20 tcp=20 topuser=alison 2026-08-14 20:01:23 L1=1.35 run=3 blk=0 avail=7325 (62.5%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=141 ap=16 tcp=20 topuser=evolution 2026-08-14 20:01:28 L1=1.41 run=3 blk=0 avail=7313 (62.3%) swpO=0 conn=2 myRSS=2074 php=1 phpRSS=100 ap=15 tcp=21 topuser=evolution 2026-08-14 20:01:33 L1=1.37 run=2 blk=0 avail=7320 (62.4%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=140 ap=15 tcp=20 topuser=evolution 2026-08-14 20:01:38 L1=1.58 run=3 blk=0 avail=7323 (62.4%) swpO=0 conn=2 myRSS=2074 php=1 phpRSS=100 ap=15 tcp=20 topuser=evolution 2026-08-14 20:01:44 L1=1.54 run=2 blk=0 avail=7306 (62.3%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=141 ap=15 tcp=22 topuser=evolution 2026-08-14 20:01:48 L1=1.41 run=6 blk=0 avail=7229 (61.6%) swpO=0 conn=3 myRSS=2074 php=2 phpRSS=203 ap=15 tcp=24 topuser=infinium 2026-08-14 20:01:54 L1=1.38 run=2 blk=0 avail=7245 (61.8%) swpO=0 conn=4 myRSS=2074 php=3 phpRSS=219 ap=18 tcp=19 topuser=evolution 2026-08-14 20:01:58 L1=1.43 run=3 blk=0 avail=7307 (62.3%) swpO=0 conn=3 myRSS=2074 php=1 phpRSS=100 ap=17 tcp=19 topuser=evolution 2026-08-14 20:02:04 L1=1.56 run=3 blk=0 avail=7131 (60.8%) swpO=0 conn=4 myRSS=2074 php=3 phpRSS=352 ap=15 tcp=19 topuser=madalice 2026-08-14 20:02:08 L1=1.43 run=4 blk=0 avail=6939 (59.2%) swpO=0 conn=3 myRSS=2074 php=5 phpRSS=582 ap=18 tcp=73 topuser=evolution 2026-08-14 20:02:14 L1=1.80 run=17 blk=0 avail=5927 (50.5%) swpO=69 conn=17 myRSS=2073 php=18 phpRSS=1587 ap=77 tcp=63 topuser=evolution