INCIDENT 2026-08-24 10:55:16 trigger: php_rss=1660MB mysql_conn=18 ================================================================== load: 4.29 2.36 2.16 23/756 3472879 ncpu:10 mem_avail: 4592MB/11729MB (39.2%) swap_used:3598MB swapout:196/s blocked(D):0 running:26 iowait:0.2% steal:0.0% php: 23 procs / 1660MB heaviest user: infinium (10 procs, 956MB) apache: 125 procs tcp_estab: 109 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2976 nobody 124 2024 infinium 10 1015 root 243 953 netdata 8 258 evolution 12 216 olympic 3 196 speedlin 2 158 vinesit 2 126 mailman 20 93 cpanellogin 1 64 mailnull 4 34 dovenull 6 26 kurri 2 23 wp-toolkit 6 20 zabbix 1 15 named 1 11 alison 1 11 nscd 1 7 dovecot 3 7 --- php workers by user --- USER PROCS RSS_MB infinium 10 1031 evolution 4 198 olympic 3 191 speedlin 2 161 vinesit 2 126 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4079 MB Active(file): 3237 MB Inactive(file): 697 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 411 MB CommitLimit: 9960 MB Committed_AS: 11186 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3032611 root 09:43:59 3532 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 3047752 9.6 Ssl 9-03:04:42 /usr/sbin/mariadbd 1220 1 netdata 208296 2.5 Ssl 56-00:45:24 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2575382 1 root 199224 0.0 Ss 9-03:04:45 /usr/lib/systemd/systemd-journald 3080743 3075441 root 170092 0.1 S 08:22:39 spamd child 3080744 3075441 root 146632 0.0 S 08:22:39 spamd child 3472769 3472488 infinium 127880 30.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472767 3472573 infinium 127356 29.5 Sl 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472777 3471335 infinium 127064 27.0 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472772 3472572 infinium 126996 27.5 R 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3075441 1 root 121148 0.0 Ss 08:32:18 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3472808 3472785 infinium 116600 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472809 3472784 infinium 115820 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472814 3472645 infinium 112872 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472815 3472505 infinium 111588 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472797 3472048 infinium 110508 45.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472816 3472571 infinium 102800 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3472805 3471707 speedlin 98228 65.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472806 3471890 speedlin 95432 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472804 3471249 olympic 94948 62.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472807 3472787 vinesit 70320 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472819 3472604 vinesit 67984 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472774 3468831 evolution 67564 9.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3472846 3472570 evolution 66772 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3418681 1353308 cpanellogin 66056 0.1 S 56:24 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3472889 3472720 vinesit 61564 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472903 3472601 vinesit 60492 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472892 3472025 olympic 60448 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3472836 3472781 olympic 57744 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2223 1201 root 45092 0.0 Sl 56-00:45:23 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3472677 3472597 evolution 43180 0.4 S 00:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 41948 0.0 Ss 33-08:13:54 cpsrvd (SSL) - waiting for connections 3472789 3472602 evolution 39472 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 31596 0.1 Sl 56-00:45:19 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 26732 0.1 Ss 56-00:45:23 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3074682 1 root 23064 0.0 Ss 08:32:52 lfd - sleeping 1463 1 root 22708 0.0 Ss 56-00:45:23 tailwatchd 3471331 1276780 nobody 22196 0.1 S 01:20 /usr/sbin/httpd -k start 3470481 1276780 nobody 22116 0.1 S 02:21 /usr/sbin/httpd -k start 3469552 1276780 nobody 21348 0.0 S 03:24 /usr/sbin/httpd -k start 3471328 1276780 nobody 20936 0.1 S 01:20 /usr/sbin/httpd -k start 3466631 1276780 nobody 20624 0.0 S 06:12 /usr/sbin/httpd -k start 3471237 1276780 nobody 20560 0.0 S 01:23 /usr/sbin/httpd -k start 3470447 1276780 nobody 20336 0.1 S 02:23 /usr/sbin/httpd -k start 3470240 1276780 nobody 20160 0.0 S 02:39 /usr/sbin/httpd -k start 3472071 1276780 nobody 20152 0.0 S 00:35 /usr/sbin/httpd -k start 3471332 1276780 nobody 20060 0.1 S 01:20 /usr/sbin/httpd -k start 3470480 1276780 nobody 20056 0.1 S 02:21 /usr/sbin/httpd -k start 3470478 1276780 nobody 20008 0.0 S 02:21 /usr/sbin/httpd -k start 3472503 1276780 nobody 19916 0.1 S 00:11 /usr/sbin/httpd -k start 3471220 1276780 nobody 19836 0.0 S 01:24 /usr/sbin/httpd -k start 3470463 1276780 nobody 19796 0.0 S 02:22 /usr/sbin/httpd -k start 3468831 1276780 nobody 19768 0.0 S 04:02 /usr/sbin/httpd -k start 3471707 1276780 nobody 19668 0.0 S 00:58 /usr/sbin/httpd -k start 3467410 1276780 nobody 19400 0.0 S 05:14 /usr/sbin/httpd -k start 3472488 1276780 nobody 19332 0.1 S 00:12 /usr/sbin/httpd -k start 3472048 1276780 nobody 19284 0.0 S 00:36 /usr/sbin/httpd -k start 3468343 1276780 nobody 19188 0.0 S 04:29 /usr/sbin/httpd -k start 3471767 1276780 nobody 19068 0.0 S 00:52 /usr/sbin/httpd -k start 3471889 1276780 nobody 19036 0.1 S 00:46 /usr/sbin/httpd -k start 3472600 1276780 nobody 18900 0.1 S 00:09 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 25529459 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 25529458 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 25529457 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 884 evolution/apps.evolutionerp.com.au-ssl_log 161 coscom/coscom.com.au-ssl_log 99 evolution/portal.evolutionerp.com.au-ssl_log 81 aaa/aaadownunder.com.au-ssl_log 18 corpkicks/corporatekicks.com.au-ssl_log 15 alison/alisonarts.com.au-ssl_log 11 madalice/madalice.com.au-ssl_log 11 tubesupplies/tubesupplies.com.au-ssl_log 9 customc/customcentral.com.au-ssl_log 7 olympic/olympicfencing.com.au-ssl_log 7 evolution/evolutionerp.com.au 5 evolution/evolutionerp.com.au-ssl_log 3 (total vhosts taking traffic: 13) --- top client IPs across all vhosts (last 3 min) --- 430 203.54.180.238 173 103.104.165.99 162 34.138.27.236 121 120.150.225.142 99 20.100.175.163 88 182.239.240.254 48 103.104.164.114 46 180.181.236.49 42 124.198.132.135 20 147.161.215.89 16 165.225.233.109 12 150.228.163.253 6 118.127.40.55 6 1.145.74.198 4 120.21.210.31 --- top request paths across all vhosts (last 3 min) --- 239 POST /functions.php 190 GET /app/ajax.php 75 GET /index.php 52 POST /clienteditsave.php 33 POST /app/ajax/selectFilterSingle.php 31 POST /plugins/csvexporter/plugin.php 30 POST /app/ajax.php 29 POST /app/ajax/selectFilter.php 28 GET /heartbeat.php 26 POST /jobeditsave.php 25 GET //app/ajax.php 24 GET /factory_session_checker.php 18 POST /logsave.php 14 POST //functions.php 12 GET /factory_session_processed_qty.php 12 GET /factory_session_joiner.php 11 GET / 10 POST //clienteditsave.php 10 GET /plugins/fensa/fensa-ajax.php 9 POST /inveditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 239 POST /functions.php 190 GET /app/ajax.php 73 GET /index.php 52 POST /clienteditsave.php 33 POST /app/ajax/selectFilterSingle.php 31 POST /plugins/csvexporter/plugin.php 30 POST /app/ajax.php 29 POST /app/ajax/selectFilter.php 26 POST /jobeditsave.php 25 GET //app/ajax.php 18 POST /logsave.php 14 POST //functions.php -- last 10 requests -- 203.54.180.238 - - [24/Aug/2026:10:55:13 +1000] "POST /clienteditsave.php?clientid=11079&call=getCategoryDiscounts HTTP/1.1" 200 454 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29387" "Mozilla/5.0 (Windows 182.239.240.254 - - [24/Aug/2026:10:55:14 +1000] "GET /index.php?page=mfreqedit&id=4515 HTTP/1.1" 200 23181 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4075&tab=jobeditmf" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.165.99 - - [24/Aug/2026:10:55:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36780" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 182.239.240.254 - - [24/Aug/2026:10:55:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2621 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4075&tab=jobeditmf" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.165.99 - - [24/Aug/2026:10:55:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 182.239.240.254 - - [24/Aug/2026:10:55:15 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfreqedit%26id%3D4515&call=getUserSetting&caller=ajaxSubmitLocal&seq=15721333820 HTTP/1.1" 200 99 "https://my.evolutionerp.com. 51.107.1.72 - - [24/Aug/2026:10:55:15 +1000] "GET / HTTP/1.1" 200 5236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 1.145.74.198 - - [24/Aug/2026:10:55:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge 180.181.236.49 - - [24/Aug/2026:10:55:16 +1000] "POST /purchaseaddsave.php?call=fetch HTTP/1.1" 200 29 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 51.107.1.72 - - [24/Aug/2026:10:55:16 +1000] "GET /wp-login.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" == evolution/apps.evolutionerp.com.au-ssl_log == -- top paths -- 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /.zshrc 1 GET /z9x8c7v6b5-debug-trigger-apps.evolutionerp.com.au 1 GET /wp-json 1 GET /wp-config.php.old 1 GET /wp-config.php.bak 1 GET /web/.env 1 GET /web.config 1 GET /values.yaml 1 GET /v1/graphql -- last 10 requests -- 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /frontend/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /debug/pprof/cmdline HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /_health HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /values.yaml HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /config/runtime.exs HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /server/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /debug/vars HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /.env.docker HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /docker/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.138.27.236 - - [24/Aug/2026:10:53:12 +1000] "GET /production/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" == coscom/coscom.com.au-ssl_log == -- top paths -- 1 GET /zoom1.php 1 GET /xx.php 1 GET /xmlrpc.php 1 GET /xda.php 1 GET /ws.php 1 GET /ws81.php 1 GET /ws77.php 1 GET /ws37.php 1 GET /wp-trackback.php 1 GET /wp-the.php 1 GET /wp-themes.php 1 GET /wp-signin.php -- last 10 requests -- 20.100.175.163 - - [24/Aug/2026:10:53:30 +1000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:30 +1000] "GET /wp-signin.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:31 +1000] "GET /Ov-Simple1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:31 +1000] "GET /fm.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:31 +1000] "GET /ftde.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:32 +1000] "GET /hplfuns.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:32 +1000] "GET /log.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:32 +1000] "GET /test.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:32 +1000] "GET /txets.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.175.163 - - [24/Aug/2026:10:53:33 +1000] "GET /wp-admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-24 10:52:55 L1=1.33 run=4 blk=0 avail=6044 (51.5%) swpO=0 conn=1 myRSS=2980 php=4 phpRSS=188 ap=53 tcp=58 topuser=evolution 2026-08-24 10:52:55 L1=1.33 run=3 blk=0 avail=6041 (51.5%) swpO=0 conn=3 myRSS=2980 php=4 phpRSS=188 ap=53 tcp=56 topuser=evolution 2026-08-24 10:53:05 L1=1.59 run=2 blk=0 avail=6078 (51.8%) swpO=0 conn=1 myRSS=2980 php=1 phpRSS=67 ap=51 tcp=61 topuser=evolution 2026-08-24 10:53:05 L1=1.59 run=2 blk=0 avail=6107 (52.1%) swpO=0 conn=3 myRSS=2980 php=0 phpRSS=0 ap=51 tcp=60 topuser=- 2026-08-24 10:53:15 L1=1.42 run=1 blk=0 avail=6180 (52.7%) swpO=0 conn=1 myRSS=2980 php=0 phpRSS=0 ap=44 tcp=50 topuser=- 2026-08-24 10:53:15 L1=1.42 run=2 blk=0 avail=6170 (52.6%) swpO=0 conn=3 myRSS=2980 php=1 phpRSS=26 ap=44 tcp=50 topuser=evolution 2026-08-24 10:53:25 L1=1.27 run=3 blk=0 avail=6157 (52.5%) swpO=0 conn=2 myRSS=2980 php=3 phpRSS=143 ap=38 tcp=53 topuser=evolution 2026-08-24 10:53:25 L1=1.27 run=2 blk=0 avail=6155 (52.5%) swpO=0 conn=3 myRSS=2980 php=3 phpRSS=143 ap=38 tcp=52 topuser=evolution 2026-08-24 10:53:35 L1=1.15 run=3 blk=0 avail=6207 (52.9%) swpO=0 conn=2 myRSS=2980 php=1 phpRSS=65 ap=35 tcp=42 topuser=evolution 2026-08-24 10:53:35 L1=1.15 run=2 blk=0 avail=6207 (52.9%) swpO=0 conn=3 myRSS=2980 php=1 phpRSS=65 ap=35 tcp=42 topuser=evolution 2026-08-24 10:53:45 L1=1.20 run=2 blk=0 avail=6228 (53.1%) swpO=0 conn=2 myRSS=2980 php=1 phpRSS=35 ap=37 tcp=48 topuser=evolution 2026-08-24 10:53:45 L1=1.20 run=1 blk=0 avail=6229 (53.1%) swpO=0 conn=1 myRSS=2980 php=0 phpRSS=0 ap=37 tcp=49 topuser=- 2026-08-24 10:53:55 L1=1.33 run=2 blk=0 avail=6097 (52.0%) swpO=0 conn=2 myRSS=2980 php=2 phpRSS=88 ap=51 tcp=53 topuser=evolution 2026-08-24 10:53:55 L1=1.33 run=6 blk=0 avail=6100 (52.0%) swpO=0 conn=1 myRSS=2980 php=2 phpRSS=81 ap=51 tcp=53 topuser=evolution 2026-08-24 10:54:05 L1=1.50 run=2 blk=0 avail=6004 (51.2%) swpO=0 conn=2 myRSS=2981 php=2 phpRSS=135 ap=59 tcp=53 topuser=evolution 2026-08-24 10:54:05 L1=1.50 run=4 blk=0 avail=5934 (50.6%) swpO=0 conn=1 myRSS=2981 php=5 phpRSS=271 ap=59 tcp=53 topuser=evolution 2026-08-24 10:54:15 L1=1.58 run=3 blk=0 avail=6063 (51.7%) swpO=0 conn=2 myRSS=2981 php=2 phpRSS=137 ap=49 tcp=51 topuser=olympic 2026-08-24 10:54:15 L1=1.58 run=3 blk=0 avail=6045 (51.5%) swpO=0 conn=1 myRSS=2981 php=2 phpRSS=155 ap=49 tcp=51 topuser=olympic 2026-08-24 10:54:25 L1=1.56 run=1 blk=0 avail=6090 (51.9%) swpO=0 conn=1 myRSS=2981 php=0 phpRSS=0 ap=51 tcp=57 topuser=- 2026-08-24 10:54:25 L1=1.56 run=3 blk=0 avail=6070 (51.8%) swpO=0 conn=1 myRSS=2981 php=1 phpRSS=42 ap=51 tcp=58 topuser=evolution 2026-08-24 10:54:35 L1=1.79 run=6 blk=0 avail=5828 (49.7%) swpO=0 conn=1 myRSS=2981 php=3 phpRSS=335 ap=54 tcp=63 topuser=madalice 2026-08-24 10:54:35 L1=1.79 run=9 blk=0 avail=5774 (49.2%) swpO=0 conn=1 myRSS=2981 php=6 phpRSS=485 ap=54 tcp=67 topuser=evolution 2026-08-24 10:54:45 L1=2.37 run=1 blk=0 avail=5973 (50.9%) swpO=0 conn=1 myRSS=2981 php=1 phpRSS=66 ap=63 tcp=68 topuser=evolution 2026-08-24 10:54:45 L1=2.37 run=1 blk=0 avail=5971 (50.9%) swpO=0 conn=2 myRSS=2981 php=1 phpRSS=66 ap=63 tcp=69 topuser=evolution 2026-08-24 10:54:55 L1=2.67 run=1 blk=0 avail=6070 (51.7%) swpO=0 conn=1 myRSS=2981 php=0 phpRSS=0 ap=56 tcp=60 topuser=- 2026-08-24 10:54:55 L1=2.67 run=2 blk=0 avail=6047 (51.6%) swpO=0 conn=2 myRSS=2981 php=1 phpRSS=59 ap=56 tcp=59 topuser=madalice 2026-08-24 10:55:05 L1=2.33 run=11 blk=0 avail=5566 (47.5%) swpO=0 conn=1 myRSS=2981 php=12 phpRSS=837 ap=56 tcp=88 topuser=alison 2026-08-24 10:55:06 L1=2.33 run=12 blk=0 avail=5470 (46.6%) swpO=0 conn=2 myRSS=2981 php=13 phpRSS=976 ap=56 tcp=90 topuser=corpkicks 2026-08-24 10:55:15 L1=4.29 run=28 blk=0 avail=4831 (41.2%) swpO=196 conn=1 myRSS=2976 php=21 phpRSS=1424 ap=126 tcp=111 topuser=infinium 2026-08-24 10:55:16 L1=4.29 run=26 blk=0 avail=4592 (39.2%) swpO=196 conn=18 myRSS=2976 php=23 phpRSS=1660 ap=125 tcp=109 topuser=infinium