INCIDENT 2026-08-18 15:29:42 trigger: php_procs=26 ================================================================== load: 4.42 4.63 3.73 6/717 1674530 ncpu:10 mem_avail: 6323MB/11729MB (53.9%) swap_used:2704MB swapout:0/s blocked(D):0 running:4 iowait:0.3% steal:0.0% php: 26 procs / 1149MB heaviest user: evolution (26 procs, 1149MB) apache: 64 procs tcp_estab: 36 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2255 evolution 30 1163 nobody 63 948 root 239 504 kamcool 3 308 netdata 8 263 cpanellogin 1 107 kurri 6 69 mailnull 3 30 dovenull 6 26 aaa 2 23 wp-toolkit 6 18 zabbix 1 15 alison 1 13 mailman 20 12 nscd 1 7 dovecot 3 7 named 1 5 dbus 1 2 cpanelconnecttrack 1 2 --- php workers by user --- USER PROCS RSS_MB evolution 26 1149 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5530 MB Active(file): 4593 MB Inactive(file): 1110 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 344 MB CommitLimit: 9960 MB Committed_AS: 11284 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 14:18:26 1116 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2309564 10.3 Ssl 3-07:39:05 /usr/sbin/mariadbd 1220 1 netdata 203484 2.5 Ssl 50-05:19:47 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000361 998750 kamcool 153340 0.0 S 13:04:53 spamd child 1674485 1000361 kamcool 151208 0.0 S 00:04 spamd child (razor2) 1638383 1353308 cpanellogin 110268 0.0 S 38:33 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2575382 1 root 93584 0.0 Ss 3-07:39:08 /usr/lib/systemd/systemd-journald 998750 1 root 90160 0.0 Ss 13:06:58 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1578009 998750 root 87804 0.0 S 01:47:14 spamd child 1658731 1658711 evolution 59092 0.7 S 15:34 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1658820 1658284 evolution 59088 0.7 R 15:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1660119 1660117 evolution 57796 0.6 S 14:21 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1661971 1661923 evolution 56032 0.5 S 12:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1662694 1662154 evolution 55628 0.5 S 11:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1666918 1666256 evolution 54048 0.5 S 07:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669958 1669681 evolution 43228 0.0 S 04:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669957 1669680 evolution 43184 0.0 S 04:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663347 1663338 evolution 43156 0.0 S 11:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663808 1663363 evolution 43084 0.0 S 10:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663804 1663711 evolution 43072 0.0 S 10:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663661 1663314 evolution 43012 0.0 S 10:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663613 1658938 evolution 42996 0.0 S 10:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663197 1662151 evolution 42984 0.0 S 11:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663383 1663357 evolution 42956 0.0 S 10:58 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669525 1669080 evolution 42916 0.0 S 04:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669524 1669082 evolution 42808 0.0 S 04:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669526 1669065 evolution 42756 0.0 S 04:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1674500 1673810 evolution 42188 14.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42104 0.0 Ss 27-12:48:17 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 41540 0.1 Sl 50-05:19:42 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1674541 1674489 evolution 40836 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 40396 0.0 Sl 50-05:19:46 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1664109 1663969 evolution 39712 0.0 S 09:46 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663166 1661359 evolution 39700 0.0 S 11:12 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663645 1663336 evolution 39700 0.0 S 10:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663658 1661021 evolution 39672 0.0 S 10:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1665393 1663680 evolution 39612 0.0 S 08:50 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1665409 1664796 evolution 39592 0.0 S 08:48 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663678 1662119 evolution 39196 0.0 S 10:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 26628 0.1 Ss 50-05:19:46 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1668037 1276780 nobody 20404 0.0 S 05:49 /usr/sbin/httpd -k start 998083 1 root 19832 0.0 Ss 13:07:31 lfd - sleeping 1671807 1276780 nobody 19488 0.0 S 02:18 /usr/sbin/httpd -k start 1671797 1276780 nobody 19464 0.0 S 02:19 /usr/sbin/httpd -k start 1670675 1276780 nobody 19340 0.1 S 03:17 /usr/sbin/httpd -k start 1661021 1276780 nobody 19236 0.0 S 13:26 /usr/sbin/httpd -k start 1658938 1276780 nobody 18884 0.0 S 15:21 /usr/sbin/httpd -k start 1673157 1276780 nobody 18580 0.1 S 01:17 /usr/sbin/httpd -k start 1673849 1276780 nobody 18400 0.1 S 00:44 /usr/sbin/httpd -k start 1672723 1276780 nobody 18272 0.0 S 01:36 /usr/sbin/httpd -k start 1672742 1276780 nobody 18172 0.0 S 01:32 /usr/sbin/httpd -k start 1663680 1276780 nobody 18116 0.0 S 10:27 /usr/sbin/httpd -k start 1669066 1276780 nobody 18044 0.0 S 04:49 /usr/sbin/httpd -k start 1673341 1276780 nobody 17936 0.0 S 01:02 /usr/sbin/httpd -k start 1662151 1276780 nobody 17908 0.0 S 12:01 /usr/sbin/httpd -k start 1669080 1276780 nobody 17788 0.0 S 04:48 /usr/sbin/httpd -k start 1671806 1276780 nobody 17676 0.1 S 02:18 /usr/sbin/httpd -k start 1671154 1276780 nobody 17488 0.0 S 03:01 /usr/sbin/httpd -k start 1673340 1276780 nobody 17200 0.0 S 01:02 /usr/sbin/httpd -k start 1463 1 root 17180 0.0 Ss 50-05:19:46 tailwatchd 1666256 1276780 nobody 16772 0.0 S 07:41 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9385590 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 9385589 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9385585 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9385583 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | | 9385584 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | | 9385582 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9385559 | root | 85-1525752154 | Execute | 0 | Sending data | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | | 9385557 | root | 85-1525752154 | Execute | 0 | Sending data | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+---------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+---------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9385585 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9385583 | 85-1525752154 | 0 | Waiting for table level lock | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadd | | 9385584 | 85-1525752154 | 0 | Waiting for table level lock | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadd | | 9385582 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | +---------+---------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 510 infinium/infinium.net.au-ssl_log 131 cosgrovecreative/cosgrovecreative.com.au-ssl_log 55 evolution/portal.evolutionerp.com.au-ssl_log 47 corpkicks/corporatekicks.com.au-ssl_log 6 madalice/madalice.com.au-ssl_log 1 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 232 203.54.180.238 129 20.42.19.40 123 103.104.164.114 75 103.104.165.99 62 182.239.240.254 32 191.237.254.161 24 180.181.236.49 23 20.151.109.219 9 147.161.213.78 9 116.91.221.198 6 203.214.146.60 4 101.182.108.127 3 40.77.167.51 3 1.144.107.82 2 185.14.4.145 --- top request paths across all vhosts (last 3 min) --- 190 POST /functions.php 97 GET /app/ajax.php 48 GET /index.php 44 GET /heartbeat.php 36 POST /quoteditsave.php 19 POST /plugins/csvexporter/plugin.php 17 POST /purchaseaddsave.php 17 POST /clienteditsave.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 14 POST /app/ajax/selectFilter.php 6 POST /jobeditsave.php 6 POST /inveditsave.php 6 POST //functions.php 5 POST /invoiceaddsave.php 4 GET /wp-content/plugins/hellopress/wp_filemanager.php 4 GET /admin.php 4 GET /aa.php 3 POST /logsave.php 3 POST /login.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 190 POST /functions.php 97 GET /app/ajax.php 46 GET /index.php 36 POST /quoteditsave.php 19 POST /plugins/csvexporter/plugin.php 17 POST /purchaseaddsave.php 17 POST /clienteditsave.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 14 POST /app/ajax/selectFilter.php 6 POST /jobeditsave.php 6 POST /inveditsave.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:15:29:35 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21773 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43667" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [18/Aug/2026:15:29:35 +1000] "POST /clienteditsave.php?clientid=15&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=5666&tab=maintab" "Moz 182.239.240.254 - - [18/Aug/2026:15:29:35 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 75 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=5666&tab=maintab" "Mozilla/5.0 (Windows NT 182.239.240.254 - - [18/Aug/2026:15:29:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=5666&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [18/Aug/2026:15:29:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [18/Aug/2026:15:29:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [18/Aug/2026:15:29:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 203.54.180.238 - - [18/Aug/2026:15:29:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [18/Aug/2026:15:29:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=reqedit&id=9848" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 103.104.164.114 - - [18/Aug/2026:15:29:37 +1000] "POST /quoteditsave.php?clientid=170&call=getClient HTTP/1.1" 200 632 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1672§ionid=0" "Mozilla/5.0 (Windo == infinium/infinium.net.au-ssl_log == -- top paths -- 3 GET /ioxi-o.php 3 GET /admin.php 3 GET /adminfuns.php 2 GET /wp-content/themes/admin.php 2 GET /wk/index.php 2 GET /lite.php 2 GET /inputs.php 2 GET /info.php 2 GET /index/function.php 2 GET /goods.php 2 GET /file.php 2 GET /edit.php -- last 10 requests -- 20.42.19.40 - - [18/Aug/2026:15:29:11 +1000] "GET /cong.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:12 +1000] "GET /db.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:12 +1000] "GET /dropdown.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:13 +1000] "GET /file.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:13 +1000] "GET /goods.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:14 +1000] "GET /hplfuns.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:14 +1000] "GET /htaccess.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:15 +1000] "GET /index/function.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:15 +1000] "GET /info.php HTTP/1.1" 404 5749 "-" "-" 20.42.19.40 - - [18/Aug/2026:15:29:15 +1000] "GET /profile.php HTTP/1.1" 404 5749 "-" "-" == cosgrovecreative/cosgrovecreative.com.au-ssl_log == -- top paths -- 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /this_is_a_new_hello_world.php 2 GET /av.php 2 GET /aa.php 1 GET /yj09.php 1 GET /xx.php 1 GET /xmlrpc.php 1 GET /wpxml.php 1 GET /wp-ws68.php 1 GET /wp-site.php 1 GET /wp-login.php 1 GET /wp-head.php -- last 10 requests -- 191.237.254.161 - - [18/Aug/2026:15:29:22 +1000] "GET /blurbs.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:23 +1000] "GET /bajah.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:24 +1000] "GET /domvf.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:24 +1000] "GET /fpwch.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:25 +1000] "GET /sf.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:26 +1000] "GET /xx.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:26 +1000] "GET /adminner.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:27 +1000] "GET /wp-content/uploads/ HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:27 +1000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 191.237.254.161 - - [18/Aug/2026:15:29:28 +1000] "GET /wpxml.php HTTP/1.1" 401 36 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-18 15:27:12 L1=5.91 run=4 blk=0 avail=6382 (54.4%) swpO=0 conn=7 myRSS=2259 php=25 phpRSS=1108 ap=63 tcp=33 topuser=evolution 2026-08-18 15:27:20 L1=5.32 run=2 blk=0 avail=6424 (54.8%) swpO=0 conn=6 myRSS=2259 php=25 phpRSS=1108 ap=55 tcp=40 topuser=evolution 2026-08-18 15:27:22 L1=5.32 run=5 blk=0 avail=6280 (53.5%) swpO=0 conn=10 myRSS=2259 php=28 phpRSS=1343 ap=54 tcp=44 topuser=evolution 2026-08-18 15:27:30 L1=5.56 run=4 blk=0 avail=6372 (54.3%) swpO=0 conn=7 myRSS=2259 php=25 phpRSS=1108 ap=59 tcp=49 topuser=evolution 2026-08-18 15:27:32 L1=5.56 run=3 blk=0 avail=6380 (54.4%) swpO=0 conn=7 myRSS=2259 php=25 phpRSS=1108 ap=58 tcp=46 topuser=evolution 2026-08-18 15:27:41 L1=5.32 run=10 blk=0 avail=6296 (53.7%) swpO=0 conn=7 myRSS=2260 php=26 phpRSS=1168 ap=69 tcp=56 topuser=evolution 2026-08-18 15:27:42 L1=5.32 run=4 blk=0 avail=6317 (53.9%) swpO=0 conn=7 myRSS=2260 php=25 phpRSS=1108 ap=69 tcp=49 topuser=evolution 2026-08-18 15:27:51 L1=4.88 run=5 blk=0 avail=6267 (53.4%) swpO=0 conn=8 myRSS=2260 php=26 phpRSS=1234 ap=62 tcp=37 topuser=evolution 2026-08-18 15:27:52 L1=4.88 run=9 blk=0 avail=6110 (52.1%) swpO=0 conn=7 myRSS=2260 php=27 phpRSS=1420 ap=61 tcp=40 topuser=evolution 2026-08-18 15:28:01 L1=5.23 run=4 blk=0 avail=6393 (54.5%) swpO=0 conn=7 myRSS=2260 php=25 phpRSS=1108 ap=55 tcp=40 topuser=evolution 2026-08-18 15:28:02 L1=5.23 run=2 blk=0 avail=6400 (54.6%) swpO=0 conn=7 myRSS=2260 php=25 phpRSS=1108 ap=55 tcp=40 topuser=evolution 2026-08-18 15:28:11 L1=5.50 run=4 blk=0 avail=6356 (54.2%) swpO=0 conn=6 myRSS=2260 php=26 phpRSS=1173 ap=55 tcp=45 topuser=evolution 2026-08-18 15:28:12 L1=5.50 run=12 blk=0 avail=6217 (53.0%) swpO=0 conn=9 myRSS=2260 php=28 phpRSS=1389 ap=55 tcp=41 topuser=evolution 2026-08-18 15:28:21 L1=5.56 run=3 blk=0 avail=6381 (54.4%) swpO=0 conn=7 myRSS=2260 php=25 phpRSS=1108 ap=55 tcp=50 topuser=evolution 2026-08-18 15:28:22 L1=5.56 run=15 blk=0 avail=6305 (53.8%) swpO=0 conn=8 myRSS=2260 php=27 phpRSS=1247 ap=55 tcp=53 topuser=evolution 2026-08-18 15:28:31 L1=5.60 run=2 blk=0 avail=6365 (54.3%) swpO=0 conn=7 myRSS=2260 php=25 phpRSS=1108 ap=59 tcp=40 topuser=evolution 2026-08-18 15:28:32 L1=5.60 run=2 blk=0 avail=6371 (54.3%) swpO=0 conn=7 myRSS=2260 php=25 phpRSS=1108 ap=58 tcp=43 topuser=evolution 2026-08-18 15:28:41 L1=5.05 run=5 blk=0 avail=6279 (53.5%) swpO=0 conn=7 myRSS=2260 php=29 phpRSS=1292 ap=64 tcp=50 topuser=evolution 2026-08-18 15:28:42 L1=5.05 run=4 blk=0 avail=6277 (53.5%) swpO=0 conn=6 myRSS=2260 php=29 phpRSS=1293 ap=64 tcp=50 topuser=evolution 2026-08-18 15:28:52 L1=4.42 run=8 blk=0 avail=6405 (54.6%) swpO=0 conn=8 myRSS=2261 php=25 phpRSS=1108 ap=58 tcp=39 topuser=evolution 2026-08-18 15:28:53 L1=4.42 run=3 blk=0 avail=6391 (54.5%) swpO=0 conn=8 myRSS=2261 php=26 phpRSS=1148 ap=57 tcp=40 topuser=evolution 2026-08-18 15:29:02 L1=4.13 run=8 blk=0 avail=5965 (50.9%) swpO=0 conn=11 myRSS=2261 php=27 phpRSS=1608 ap=59 tcp=45 topuser=evolution 2026-08-18 15:29:03 L1=4.13 run=3 blk=0 avail=6164 (52.6%) swpO=0 conn=9 myRSS=2261 php=27 phpRSS=1408 ap=58 tcp=45 topuser=evolution 2026-08-18 15:29:12 L1=4.33 run=9 blk=0 avail=6263 (53.4%) swpO=249 conn=9 myRSS=2255 php=30 phpRSS=1370 ap=62 tcp=50 topuser=evolution 2026-08-18 15:29:13 L1=4.33 run=6 blk=0 avail=6217 (53.0%) swpO=249 conn=10 myRSS=2255 php=31 phpRSS=1443 ap=62 tcp=52 topuser=evolution 2026-08-18 15:29:22 L1=4.44 run=5 blk=0 avail=6299 (53.7%) swpO=0 conn=8 myRSS=2255 php=27 phpRSS=1216 ap=62 tcp=47 topuser=evolution 2026-08-18 15:29:23 L1=4.44 run=5 blk=0 avail=6331 (54.0%) swpO=0 conn=9 myRSS=2255 php=27 phpRSS=1213 ap=62 tcp=49 topuser=evolution 2026-08-18 15:29:32 L1=4.60 run=2 blk=0 avail=6424 (54.8%) swpO=0 conn=7 myRSS=2255 php=25 phpRSS=1108 ap=57 tcp=44 topuser=evolution 2026-08-18 15:29:33 L1=4.60 run=11 blk=0 avail=6392 (54.5%) swpO=0 conn=9 myRSS=2255 php=30 phpRSS=1277 ap=57 tcp=47 topuser=evolution 2026-08-18 15:29:42 L1=4.42 run=4 blk=0 avail=6323 (53.9%) swpO=0 conn=9 myRSS=2255 php=26 phpRSS=1149 ap=64 tcp=36 topuser=evolution