INCIDENT 2026-08-18 15:20:49 trigger: php_procs=26 ================================================================== load: 4.92 4.14 2.99 7/709 1664908 ncpu:10 mem_avail: 6298MB/11729MB (53.7%) swap_used:2781MB swapout:0/s blocked(D):0 running:9 iowait:0.0% steal:0.0% php: 26 procs / 1325MB heaviest user: evolution (24 procs, 1110MB) apache: 63 procs tcp_estab: 60 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2174 evolution 28 1124 nobody 62 950 root 236 663 netdata 8 262 madalice 2 222 cpanellogin 1 107 kurri 5 57 mailnull 6 46 dovenull 6 26 wp-toolkit 6 18 zabbix 1 14 alison 1 13 mailman 20 12 nscd 1 7 dovecot 3 7 named 1 5 dbus 1 2 cpanelconnecttrack 1 2 polkitd 1 1 --- php workers by user --- USER PROCS RSS_MB evolution 24 1110 madalice 2 225 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5621 MB Active(file): 4619 MB Inactive(file): 1051 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 341 MB CommitLimit: 9960 MB Committed_AS: 11242 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 14:09:32 1120 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2227100 9.9 Ssl 3-07:30:11 /usr/sbin/mariadbd 1220 1 netdata 201720 2.5 Ssl 50-05:10:53 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000361 998750 root 152832 0.0 S 12:55:59 spamd child 1664862 1664341 madalice 129192 99.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1664866 1664307 madalice 116420 90.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1638383 1353308 cpanellogin 110188 0.0 S 29:39 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2575382 1 root 90976 0.0 Ss 3-07:30:14 /usr/lib/systemd/systemd-journald 998750 1 root 90208 0.0 Ss 12:58:04 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1578009 998750 root 87876 0.0 S 01:38:20 spamd child 1664816 1660403 evolution 70180 4.0 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1664831 1664798 evolution 69280 10.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1658731 1658711 evolution 59036 0.9 S 06:40 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1658820 1658284 evolution 58952 0.9 S 06:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1660119 1660117 evolution 57564 0.8 S 05:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1661971 1661923 evolution 55768 0.7 S 03:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1662694 1662154 evolution 55628 0.7 S 02:42 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1664879 1663337 evolution 43180 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1664872 1664305 evolution 43160 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663347 1663338 evolution 43156 0.0 S 02:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663808 1663363 evolution 43084 0.0 S 01:24 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663804 1663711 evolution 43072 0.0 S 01:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1664874 1664792 evolution 43048 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663661 1663314 evolution 43012 0.0 S 01:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663613 1658938 evolution 42996 0.0 S 01:42 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663197 1662151 evolution 42984 0.0 S 02:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663383 1663357 evolution 42956 0.0 S 02:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1664873 1659365 evolution 42780 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 42632 0.1 Sl 50-05:10:48 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 42104 0.0 Ss 27-12:39:23 cpsrvd (SSL) - waiting for connections 2223 1201 root 40396 0.0 Sl 50-05:10:52 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1664109 1663969 evolution 39712 0.0 S 00:52 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663166 1661359 evolution 39700 0.0 S 02:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663645 1663336 evolution 39700 0.0 S 01:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663658 1661021 evolution 39672 0.0 S 01:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1664876 1664795 evolution 39416 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663678 1662119 evolution 39196 0.0 S 01:34 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 27132 0.1 Ss 50-05:10:52 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1659365 1276780 nobody 20948 0.0 S 06:07 /usr/sbin/httpd -k start 1658714 1276780 nobody 20368 0.0 S 06:41 /usr/sbin/httpd -k start 998083 1 root 19772 0.0 Ss 12:58:37 lfd - sleeping 1661021 1276780 nobody 19200 0.0 S 04:32 /usr/sbin/httpd -k start 1660403 1276780 nobody 19004 0.0 S 05:13 /usr/sbin/httpd -k start 1658938 1276780 nobody 18884 0.0 S 06:27 /usr/sbin/httpd -k start 1663956 1276780 nobody 18452 0.1 S 01:09 /usr/sbin/httpd -k start 1664068 1276780 nobody 18360 0.0 S 00:56 /usr/sbin/httpd -k start 1663313 1276780 nobody 18188 0.0 S 02:07 /usr/sbin/httpd -k start 1663680 1276780 nobody 18088 0.0 S 01:33 /usr/sbin/httpd -k start 1663971 1276780 nobody 17984 0.0 S 01:08 /usr/sbin/httpd -k start 1662151 1276780 nobody 17908 0.0 S 03:07 /usr/sbin/httpd -k start 1662100 1276780 nobody 17800 0.0 S 03:10 /usr/sbin/httpd -k start 1663968 1276780 nobody 17588 0.0 S 01:08 /usr/sbin/httpd -k start 1463 1 root 17124 0.0 Ss 50-05:10:52 tailwatchd 1663337 1276780 nobody 17112 0.0 S 02:06 /usr/sbin/httpd -k start 1663955 1276780 nobody 16888 0.0 S 01:09 /usr/sbin/httpd -k start 1662119 1276780 nobody 16680 0.0 S 03:09 /usr/sbin/httpd -k start 1664793 1276780 nobody 16624 0.1 S 00:06 /usr/sbin/httpd -k start 1664077 1276780 nobody 16608 0.0 S 00:54 /usr/sbin/httpd -k start 185104 2431 netdata 16596 2.0 Sl 5-18:47:11 /usr/libexec/netdata/plugins.d/apps.plugin 1 1663954 1276780 nobody 16572 0.0 S 01:09 /usr/sbin/httpd -k start 1663967 1276780 nobody 16544 0.0 S 01:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9222905 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9222904 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9222903 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9222902 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9222901 | root | 85-1525752154 | Execute | 0 | Sending data | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | | 9222897 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+---------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+---------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9222906 | 85-1525752154 | 0 | Waiting for table level lock | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadd | | 9222905 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9222903 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9222902 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | +---------+---------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 577 speedlin/speedlinefencing.com.au-ssl_log 88 evolution/portal.evolutionerp.com.au-ssl_log 39 nrg/nrgservices.net.au 33 nrg/nrgservices.net.au-ssl_log 33 evolution/staging.evolutionerp.com.au-ssl_log 20 madalice/madalice.com.au-ssl_log 18 aaa/aaadownunder.com.au-ssl_log 17 otter2/otterfencing.net.au-ssl_log 13 olympic/olympicfencing.com.au-ssl_log 6 corpkicks/corporatekicks.com.au-ssl_log 4 customc/customcentral.com.au-ssl_log 2 corpkicks/2025.corporatekicks.com.au-ssl_log 1 evolution/app.evolutionerp.com.au-ssl_log 1 olympic/olympicfencing.com.au 1 (total vhosts taking traffic: 19) --- top client IPs across all vhosts (last 3 min) --- 309 203.54.180.238 153 182.239.240.254 88 68.155.146.130 66 68.221.130.146 46 103.104.165.99 35 180.181.236.49 29 1.144.107.82 24 116.91.221.198 22 147.161.213.78 16 88.151.33.96 16 103.104.164.114 14 203.214.146.60 7 85.204.70.116 6 118.127.40.55 5 101.182.108.127 --- top request paths across all vhosts (last 3 min) --- 229 POST /functions.php 125 GET /app/ajax.php 47 GET /index.php 39 GET /heartbeat.php 36 POST /app/ajax/selectFilter.php 26 POST /quoteditsave.php 20 POST /plugins/csvexporter/plugin.php 20 POST /app/ajax/selectFilterSingle.php 18 POST /clienteditsave.php 18 POST /app/ajax.php 10 POST /itemModify.php 8 GET /plugins/fensa/fensa-ajax.php 7 POST /mfreqsave.php 7 GET //app/ajax.php 6 POST /purchaseaddsave.php 6 POST /jobeditsave.php 6 GET /store/custom-newcastle-knights-kids/ 6 GET / 5 POST /wp-admin/admin-ajax.php 5 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 222 POST /functions.php 119 GET /app/ajax.php 43 GET /index.php 36 POST /app/ajax/selectFilter.php 26 POST /quoteditsave.php 20 POST /plugins/csvexporter/plugin.php 20 POST /app/ajax/selectFilterSingle.php 18 POST /clienteditsave.php 18 POST /app/ajax.php 10 POST /itemModify.php 8 GET /plugins/fensa/fensa-ajax.php 7 POST /mfreqsave.php -- last 10 requests -- 182.239.240.254 - - [18/Aug/2026:15:20:48 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=14575682912 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 182.239.240.254 - - [18/Aug/2026:15:20:48 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18212142586 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 182.239.240.254 - - [18/Aug/2026:15:20:48 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D5665%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=11365945757 HTTP 182.239.240.254 - - [18/Aug/2026:15:20:48 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D5665%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=12337343186 HTTP/1.1" 200 112 "htt 203.54.180.238 - - [18/Aug/2026:15:20:48 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28921&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [18/Aug/2026:15:20:48 +1000] "POST /clienteditsave.php?clientid=527&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=5665&tab=maintab" "Mo 180.181.236.49 - - [18/Aug/2026:15:20:48 +1000] "POST /clienteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=273&tab=clienteditadvanced" "Mozilla/5.0 (Windows NT 10.0; Win 182.239.240.254 - - [18/Aug/2026:15:20:48 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 75 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=5665&tab=maintab" "Mozilla/5.0 (Windows NT 180.181.236.49 - - [18/Aug/2026:15:20:48 +1000] "GET /index.php?page=clientedit&clientid=273 HTTP/1.1" 200 78454 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=273&tab=clienteditadvanced" "Mozilla/5.0 116.91.221.198 - - [18/Aug/2026:15:20:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=2285§ionid=453" "Mozilla/5.0 (Windows NT 10.0; Win == speedlin/speedlinefencing.com.au-ssl_log == -- top paths -- 2 GET /lite.php 2 GET /ioxi-o.php 2 GET /as.php 2 GET /admin.php 2 GET /adminfuns.php 1 GET /x.php 1 GET /xmr.php 1 GET /wp-includes/js/crop/ 1 GET /wp-includes/class-wp-http-client.php 1 GET /wp-includes/ 1 GET /wp-content/uploads/ 1 GET /wp-content/themes/theme/about.php -- last 10 requests -- 68.155.146.130 - - [18/Aug/2026:15:18:39 +1000] "GET /file.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:40 +1000] "GET /goods.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:40 +1000] "GET /hplfuns.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:41 +1000] "GET /htaccess.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:42 +1000] "GET /index/function.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:42 +1000] "GET /info.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:43 +1000] "GET /profile.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:43 +1000] "GET /sx.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:44 +1000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 401 36 "-" "-" 68.155.146.130 - - [18/Aug/2026:15:18:44 +1000] "GET /wp-admin/images/admin.php HTTP/1.1" 401 36 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 39 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:15:19:36 +1000] "GET /heartbeat.php?sentAt=1787030374&bytes=106,131,235,102&_=1787029660412 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:19:42 +1000] "GET /heartbeat.php?sentAt=1787030383&bytes=106,131,235,111&_=1787029289168 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:19:45 +1000] "GET /heartbeat.php?sentAt=1787030385&bytes=106,131,235,113&_=1787027050397 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:19:46 +1000] "GET /heartbeat.php?sentAt=1787030384&bytes=106,131,235,112&_=1787029660413 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:19:53 +1000] "GET /heartbeat.php?sentAt=1787030393&bytes=106,131,235,121&_=1787029289169 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:19:55 +1000] "GET /heartbeat.php?sentAt=1787030395&bytes=106,131,235,123&_=1787027050398 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:19:56 +1000] "GET /heartbeat.php?sentAt=1787030394&bytes=106,131,235,122&_=1787029660414 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:20:03 +1000] "GET /heartbeat.php?sentAt=1787030403&bytes=106,131,235,131&_=1787029289170 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:20:05 +1000] "GET /heartbeat.php?sentAt=1787030405&bytes=106,131,235,133&_=1787027050399 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:20:06 +1000] "GET /heartbeat.php?sentAt=1787030404&bytes=106,131,235,132&_=1787029660415 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-18 15:18:26 L1=5.18 run=7 blk=0 avail=6878 (58.6%) swpO=0 conn=7 myRSS=2172 php=6 phpRSS=320 ap=42 tcp=44 topuser=evolution 2026-08-18 15:18:28 L1=5.18 run=3 blk=0 avail=6903 (58.9%) swpO=0 conn=6 myRSS=2172 php=5 phpRSS=280 ap=41 tcp=38 topuser=evolution 2026-08-18 15:18:36 L1=4.78 run=5 blk=1 avail=6912 (58.9%) swpO=0 conn=7 myRSS=2172 php=9 phpRSS=442 ap=35 tcp=33 topuser=evolution 2026-08-18 15:18:38 L1=4.78 run=4 blk=0 avail=6893 (58.8%) swpO=0 conn=6 myRSS=2172 php=8 phpRSS=382 ap=34 tcp=36 topuser=evolution 2026-08-18 15:18:46 L1=4.27 run=5 blk=0 avail=6654 (56.7%) swpO=0 conn=7 myRSS=2173 php=11 phpRSS=554 ap=64 tcp=48 topuser=evolution 2026-08-18 15:18:48 L1=4.27 run=3 blk=0 avail=6622 (56.5%) swpO=0 conn=6 myRSS=2173 php=10 phpRSS=575 ap=62 tcp=43 topuser=evolution 2026-08-18 15:18:56 L1=4.14 run=4 blk=0 avail=6763 (57.7%) swpO=0 conn=7 myRSS=2173 php=10 phpRSS=484 ap=54 tcp=50 topuser=evolution 2026-08-18 15:18:58 L1=4.14 run=3 blk=0 avail=6771 (57.7%) swpO=0 conn=6 myRSS=2173 php=10 phpRSS=496 ap=52 tcp=42 topuser=evolution 2026-08-18 15:19:06 L1=4.05 run=8 blk=0 avail=6828 (58.2%) swpO=1 conn=7 myRSS=2173 php=10 phpRSS=484 ap=44 tcp=38 topuser=evolution 2026-08-18 15:19:08 L1=4.05 run=7 blk=0 avail=6547 (55.8%) swpO=1 conn=6 myRSS=2173 php=12 phpRSS=841 ap=42 tcp=41 topuser=evolution 2026-08-18 15:19:16 L1=4.30 run=6 blk=0 avail=6664 (56.8%) swpO=0 conn=7 myRSS=2174 php=18 phpRSS=856 ap=37 tcp=42 topuser=evolution 2026-08-18 15:19:18 L1=4.30 run=7 blk=0 avail=6767 (57.7%) swpO=0 conn=6 myRSS=2174 php=15 phpRSS=678 ap=43 tcp=43 topuser=evolution 2026-08-18 15:19:26 L1=4.58 run=3 blk=0 avail=6726 (57.3%) swpO=0 conn=7 myRSS=2174 php=17 phpRSS=768 ap=45 tcp=34 topuser=evolution 2026-08-18 15:19:28 L1=4.58 run=2 blk=0 avail=6747 (57.5%) swpO=0 conn=6 myRSS=2174 php=16 phpRSS=728 ap=44 tcp=29 topuser=evolution 2026-08-18 15:19:36 L1=4.03 run=3 blk=0 avail=6773 (57.7%) swpO=0 conn=7 myRSS=2174 php=17 phpRSS=768 ap=38 tcp=31 topuser=evolution 2026-08-18 15:19:38 L1=4.03 run=2 blk=0 avail=6777 (57.8%) swpO=0 conn=6 myRSS=2174 php=16 phpRSS=728 ap=39 tcp=40 topuser=evolution 2026-08-18 15:19:46 L1=4.40 run=9 blk=0 avail=6261 (53.4%) swpO=0 conn=7 myRSS=2174 php=20 phpRSS=1290 ap=50 tcp=40 topuser=evolution 2026-08-18 15:19:48 L1=4.40 run=8 blk=0 avail=6481 (55.3%) swpO=0 conn=6 myRSS=2174 php=17 phpRSS=990 ap=49 tcp=40 topuser=evolution 2026-08-18 15:19:56 L1=4.82 run=9 blk=0 avail=6616 (56.4%) swpO=0 conn=7 myRSS=2174 php=19 phpRSS=915 ap=49 tcp=43 topuser=evolution 2026-08-18 15:19:58 L1=4.82 run=12 blk=0 avail=6580 (56.1%) swpO=0 conn=6 myRSS=2174 php=20 phpRSS=966 ap=49 tcp=44 topuser=evolution 2026-08-18 15:20:06 L1=4.99 run=9 blk=0 avail=6257 (53.3%) swpO=2 conn=7 myRSS=2174 php=21 phpRSS=1119 ap=80 tcp=59 topuser=evolution 2026-08-18 15:20:08 L1=4.99 run=6 blk=0 avail=6372 (54.3%) swpO=2 conn=6 myRSS=2174 php=19 phpRSS=950 ap=79 tcp=53 topuser=evolution 2026-08-18 15:20:17 L1=4.75 run=2 blk=0 avail=6541 (55.8%) swpO=0 conn=7 myRSS=2174 php=18 phpRSS=807 ap=70 tcp=39 topuser=evolution 2026-08-18 15:20:18 L1=4.75 run=4 blk=0 avail=6554 (55.9%) swpO=0 conn=6 myRSS=2174 php=17 phpRSS=767 ap=68 tcp=44 topuser=evolution 2026-08-18 15:20:27 L1=4.56 run=3 blk=0 avail=6592 (56.2%) swpO=0 conn=7 myRSS=2174 php=18 phpRSS=807 ap=60 tcp=39 topuser=evolution 2026-08-18 15:20:28 L1=4.56 run=6 blk=0 avail=6590 (56.2%) swpO=0 conn=7 myRSS=2174 php=18 phpRSS=834 ap=58 tcp=43 topuser=evolution 2026-08-18 15:20:37 L1=4.90 run=7 blk=0 avail=6557 (55.9%) swpO=0 conn=7 myRSS=2174 php=22 phpRSS=1016 ap=52 tcp=43 topuser=evolution 2026-08-18 15:20:38 L1=4.90 run=16 blk=0 avail=6598 (56.3%) swpO=0 conn=7 myRSS=2174 php=24 phpRSS=1057 ap=52 tcp=47 topuser=evolution 2026-08-18 15:20:47 L1=4.92 run=5 blk=0 avail=6500 (55.4%) swpO=0 conn=7 myRSS=2174 php=20 phpRSS=940 ap=65 tcp=53 topuser=evolution 2026-08-18 15:20:49 L1=4.92 run=9 blk=0 avail=6298 (53.7%) swpO=0 conn=9 myRSS=2174 php=26 phpRSS=1325 ap=63 tcp=60 topuser=evolution