INCIDENT 2026-08-18 15:37:48 trigger: php_procs=31 ================================================================== load: 5.63 5.09 4.34 6/712 1683110 ncpu:10 mem_avail: 6298MB/11729MB (53.7%) swap_used:2717MB swapout:0/s blocked(D):0 running:5 iowait:0.0% steal:0.0% php: 31 procs / 1422MB heaviest user: evolution (30 procs, 1320MB) apache: 58 procs tcp_estab: 41 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2247 evolution 35 1353 nobody 57 883 root 237 669 netdata 8 262 cpanellogin 1 107 madalice 1 106 kurri 6 70 aaa 4 48 dovenull 6 26 mailnull 3 23 wp-toolkit 6 18 zabbix 1 15 alison 1 13 mailman 20 12 nscd 1 7 dovecot 3 7 named 1 6 dbus 1 2 cpanelconnecttrack 1 2 --- php workers by user --- USER PROCS RSS_MB evolution 30 1338 madalice 1 107 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5430 MB Active(file): 4563 MB Inactive(file): 985 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 345 MB CommitLimit: 9960 MB Committed_AS: 11677 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 14:26:32 1080 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2301460 10.6 Ssl 3-07:47:11 /usr/sbin/mariadbd 1220 1 netdata 203156 2.5 Ssl 50-05:27:53 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1000361 998750 root 153328 0.0 S 13:12:59 spamd child 1683074 1679347 madalice 116960 89.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1638383 1353308 cpanellogin 110356 0.0 S 46:39 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2575382 1 root 95472 0.0 Ss 3-07:47:14 /usr/lib/systemd/systemd-journald 998750 1 root 90152 0.0 Ss 13:15:04 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1578009 998750 root 87776 0.0 S 01:55:20 spamd child 1683080 1679359 evolution 83392 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1658731 1658711 evolution 59092 0.6 S 23:40 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1658820 1658284 evolution 59088 0.6 S 23:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1660119 1660117 evolution 57796 0.5 S 22:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1661971 1661923 evolution 56068 0.5 S 20:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1662694 1662154 evolution 55792 0.5 S 19:42 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1666918 1666256 evolution 54048 0.5 S 15:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669958 1669681 evolution 43228 0.0 S 12:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669957 1669680 evolution 43184 0.0 S 12:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663347 1663338 evolution 43156 0.0 S 19:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663808 1663363 evolution 43084 0.0 S 18:24 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663804 1663711 evolution 43072 0.0 S 18:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663661 1663314 evolution 43012 0.0 S 18:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663613 1658938 evolution 42996 0.0 S 18:42 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663197 1662151 evolution 42984 0.0 S 19:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663383 1663357 evolution 42956 0.0 S 19:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669525 1669080 evolution 42916 0.0 S 12:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669524 1669082 evolution 42808 0.0 S 12:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1669526 1669065 evolution 42756 0.0 S 12:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42212 0.0 Ss 27-12:56:23 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 41064 0.1 Sl 50-05:27:48 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1683143 1682824 customc 40684 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1683079 1682967 evolution 40460 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 40372 0.0 Sl 50-05:27:52 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1664109 1663969 evolution 39712 0.0 S 17:52 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663166 1661359 evolution 39700 0.0 S 19:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663645 1663336 evolution 39700 0.0 S 18:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1681817 1681474 evolution 39700 0.0 S 01:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663658 1661021 evolution 39672 0.0 S 18:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1681816 1681475 evolution 39660 0.0 S 01:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1681565 1680067 evolution 39620 0.0 S 01:50 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1665393 1663680 evolution 39612 0.0 S 16:56 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1665409 1664796 evolution 39592 0.0 S 16:54 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1663678 1662119 evolution 39196 0.0 S 18:34 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1683144 1683041 evolution 38980 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 26060 0.1 Ss 50-05:27:52 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1679000 1276780 nobody 20612 0.0 S 04:11 /usr/sbin/httpd -k start 998083 1 root 19872 0.0 Ss 13:15:37 lfd - sleeping 1679347 1276780 nobody 19804 0.1 S 03:55 /usr/sbin/httpd -k start 1661021 1276780 nobody 19236 0.0 S 21:32 /usr/sbin/httpd -k start 1679009 1276780 nobody 19144 0.0 S 04:10 /usr/sbin/httpd -k start 1682161 1276780 nobody 19092 0.1 S 01:09 /usr/sbin/httpd -k start 1681477 1276780 nobody 19028 0.0 S 01:53 /usr/sbin/httpd -k start 1658938 1276780 nobody 18884 0.0 S 23:27 /usr/sbin/httpd -k start 1682170 1276780 nobody 18356 0.0 S 01:08 /usr/sbin/httpd -k start 1663680 1276780 nobody 18116 0.0 S 18:33 /usr/sbin/httpd -k start 1681764 1276780 nobody 18044 0.0 S 01:40 /usr/sbin/httpd -k start 1662151 1276780 nobody 17908 0.0 S 20:07 /usr/sbin/httpd -k start 1669080 1276780 nobody 17820 0.0 S 12:54 /usr/sbin/httpd -k start 1682824 1276780 nobody 17820 0.4 S 00:25 /usr/sbin/httpd -k start 1680067 1276780 nobody 17764 0.0 S 03:05 /usr/sbin/httpd -k start 1679359 1276780 nobody 17616 0.1 S 03:54 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9520597 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 9520596 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9520595 | root | 85-1525752154 | Execute | 0 | Sending data | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | | 9520594 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9520593 | root | 85-1525752154 | Execute | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9520592 | root | 85-1525752154 | Execute | 0 | Sending data | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | | 9520590 | root | 85-1525752154 | Execute | 0 | Sending data | SELECT id, dateadded, month(dateadded) AS mm, year(dateadded) AS yy, (SELECT min(id) FROM jobs x WHERE x.id < ? AND month(x.dateadded) = month(jobs.dateadded) AND year(x.dateadded) = year(jobs.dateadded)) AS cid FROM jobs WHERE id = ? | +---------+----------------------+---------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+---------------+------+------------------------------+------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+---------------+------+------------------------------+------------------------------------------+ | 9520603 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9520604 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | | 9520601 | 85-1525752154 | 0 | Waiting for table level lock | UPDATE jobs SET jobcode = ? WHERE id = ? | +---------+---------------+------+------------------------------+------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 309 lowrange/lowrange.com.au-ssl_log 135 evolution/portal.evolutionerp.com.au-ssl_log 45 madalice/madalice.com.au-ssl_log 44 customc/customcentral.com.au-ssl_log 36 customc/customcentral.com.au 33 whiz/whizengineering.com.au 19 speedlin/speedlinefencing.com.au 17 speedlin/speedlinefencing.com.au-ssl_log 17 vinesit/vinesit.com.au-ssl_log 17 aaa/aaadownunder.com.au-ssl_log 10 vinesit/vinesit.com.au 6 alison/alisonarts.com.au-ssl_log 3 corpkicks/corporatekicks.com.au-ssl_log 2 infinium/infinium.net.au-ssl_log 2 (total vhosts taking traffic: 19) --- top client IPs across all vhosts (last 3 min) --- 132 20.97.182.130 129 203.54.180.238 74 180.181.236.49 69 103.104.164.114 68 20.24.67.246 35 20.104.100.201 34 20.226.56.190 20 144.217.135.171 17 20.25.139.174 17 101.182.108.127 16 103.104.165.99 14 101.166.96.210 11 182.239.240.254 11 147.161.213.78 10 116.91.221.198 --- top request paths across all vhosts (last 3 min) --- 170 POST /functions.php 41 GET /heartbeat.php 28 GET /app/ajax.php 27 POST /app/ajax.php 27 GET /index.php 23 GET / 17 POST /app/ajax/selectFilter.php 16 POST /quoteditsave.php 6 POST /plugins/csvexporter/plugin.php 6 POST //functions.php 5 POST /wp-cron.php 5 POST /app/ajax/selectFilterSingle.php 5 GET /wp-content/plugins/hellopress/wp_filemanager.php 5 GET /this_is_a_new_hello_world.php 5 GET /av.php 5 GET /admin.php 5 GET /aa.php 4 POST /wp-login.php 4 POST /jobeditsave.php 4 POST /clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 170 POST /functions.php 28 GET /app/ajax.php 27 POST /app/ajax.php 24 GET /index.php 17 POST /app/ajax/selectFilter.php 16 POST /quoteditsave.php 6 POST /plugins/csvexporter/plugin.php 6 POST //functions.php 5 POST /app/ajax/selectFilterSingle.php 4 POST /jobeditsave.php 4 POST /clienteditsave.php 3 POST /timesheets.php -- last 10 requests -- 101.166.96.210 - - [18/Aug/2026:15:37:46 +1000] "POST /itemModify.php?call=getInvMFMeta&modifyid=7594 HTTP/1.1" 200 49 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36772§ionid=0" "Mozilla/5.0 (Wind 101.166.96.210 - - [18/Aug/2026:15:37:46 +1000] "POST /itemModify.php?call=getBOM HTTP/1.1" 200 22 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36772§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; 101.166.96.210 - - [18/Aug/2026:15:37:46 +1000] "POST /quoteditsave.php?call=checkForBOMAlternates&id=7594 HTTP/1.1" 200 39 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36772§ionid=0" "Mozilla/5.0 103.104.164.114 - - [18/Aug/2026:15:37:47 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4419&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 101.166.96.210 - - [18/Aug/2026:15:37:47 +1000] "POST /quoteditsave.php?call=loadConfigureModal&id=7594&code=EA-100-100-10.0-9M&client=2060 HTTP/1.1" 200 1150 "https://my.evolutionerp.com.au/index.php?page=quotedit"e 203.54.180.238 - - [18/Aug/2026:15:37:48 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=20791" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 101.182.108.127 - - [18/Aug/2026:15:37:48 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities&date=11-08-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [18/Aug/2026:15:37:43 +1000] "GET /index.php?page=quotedit"eid=78517 HTTP/1.1" 200 185838 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 203.54.180.238 - - [18/Aug/2026:15:37:48 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78517" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [18/Aug/2026:15:37:48 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=load_fensa_modal HTTP/1.1" 200 357 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78517" "Mozilla/5.0 (Win == lowrange/lowrange.com.au-ssl_log == -- top paths -- 3 GET /ioxi-o.php 3 GET /admin.php 3 GET /adminfuns.php 2 GET /wp-content/themes/admin.php 2 GET /wk/index.php 2 GET /robots.txt 2 GET /lite.php 2 GET /inputs.php 2 GET /info.php 2 GET /index/function.php 2 GET /goods.php 2 GET /file.php -- last 10 requests -- 20.97.182.130 - - [18/Aug/2026:15:36:15 +1000] "GET /hplfuns.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:15 +1000] "GET /htaccess.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:16 +1000] "GET /index/function.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:16 +1000] "GET /info.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:16 +1000] "GET /profile.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:17 +1000] "GET /sx.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:17 +1000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 401 36 "-" "-" 20.97.182.130 - - [18/Aug/2026:15:36:18 +1000] "GET /wp-admin/images/admin.php HTTP/1.1" 401 36 "-" "-" 216.73.217.39 - - [18/Aug/2026:15:36:21 +1000] "GET /robots.txt HTTP/1.1" 200 274 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.217.39 - - [18/Aug/2026:15:36:21 +1000] "GET /sitemap.xml HTTP/1.1" 200 274 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 41 GET /heartbeat.php 3 GET /index.php 1 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:15:36:55 +1000] "GET /heartbeat.php?sentAt=1787031415&bytes=106,131,239,119&_=1787027050500 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:36:58 +1000] "GET /heartbeat.php?sentAt=1787031416&bytes=106,131,239,120&_=1787030704953 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 120.21.209.101 - - [18/Aug/2026:15:37:02 +1000] "GET /index.php?page=dispatches HTTP/1.1" 200 52045 "https://portal.evolutionerp.com.au/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1 203.54.180.238 - - [18/Aug/2026:15:37:02 +1000] "GET /heartbeat.php?sentAt=1787031423&bytes=106,131,239,127&_=1787029289272 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:37:05 +1000] "GET /heartbeat.php?sentAt=1787031425&bytes=106,131,239,129&_=1787027050501 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:37:08 +1000] "GET /heartbeat.php?sentAt=1787031426&bytes=106,131,239,130&_=1787030704954 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 120.21.209.101 - - [18/Aug/2026:15:37:09 +1000] "GET /index.php?page=delivery_commit&id=33784 HTTP/1.1" 200 21903 "https://portal.evolutionerp.com.au/index.php?page=dispatches" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 li 120.21.209.101 - - [18/Aug/2026:15:37:10 +1000] "GET /uploadsave.php?call=get_uploads&sourceId=33784&subType=delivery_commit HTTP/1.1" 200 22 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33784" " 203.54.180.238 - - [18/Aug/2026:15:37:13 +1000] "GET /heartbeat.php?sentAt=1787031433&bytes=106,131,239,137&_=1787029289273 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [18/Aug/2026:15:37:15 +1000] "GET /heartbeat.php?sentAt=1787031435&bytes=106,131,239,139&_=1787027050502 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-18 15:35:27 L1=3.74 run=5 blk=0 avail=6294 (53.7%) swpO=0 conn=8 myRSS=2245 php=26 phpRSS=1257 ap=56 tcp=43 topuser=evolution 2026-08-18 15:35:27 L1=3.74 run=5 blk=0 avail=6256 (53.3%) swpO=0 conn=10 myRSS=2245 php=26 phpRSS=1287 ap=56 tcp=43 topuser=evolution 2026-08-18 15:35:37 L1=3.47 run=4 blk=0 avail=6281 (53.6%) swpO=0 conn=8 myRSS=2245 php=26 phpRSS=1276 ap=53 tcp=48 topuser=evolution 2026-08-18 15:35:37 L1=3.47 run=4 blk=0 avail=6238 (53.2%) swpO=0 conn=8 myRSS=2245 php=26 phpRSS=1303 ap=53 tcp=54 topuser=evolution 2026-08-18 15:35:47 L1=3.94 run=3 blk=0 avail=6416 (54.7%) swpO=0 conn=7 myRSS=2245 php=25 phpRSS=1108 ap=57 tcp=41 topuser=evolution 2026-08-18 15:35:47 L1=3.94 run=5 blk=0 avail=6405 (54.6%) swpO=0 conn=8 myRSS=2245 php=26 phpRSS=1150 ap=57 tcp=43 topuser=evolution 2026-08-18 15:35:57 L1=4.20 run=7 blk=0 avail=6078 (51.8%) swpO=0 conn=8 myRSS=2245 php=27 phpRSS=1449 ap=60 tcp=52 topuser=evolution 2026-08-18 15:35:57 L1=4.20 run=15 blk=0 avail=6105 (52.1%) swpO=0 conn=8 myRSS=2245 php=27 phpRSS=1223 ap=60 tcp=52 topuser=evolution 2026-08-18 15:36:07 L1=4.09 run=8 blk=0 avail=6354 (54.2%) swpO=0 conn=7 myRSS=2246 php=30 phpRSS=1277 ap=59 tcp=51 topuser=evolution 2026-08-18 15:36:07 L1=4.09 run=9 blk=0 avail=6345 (54.1%) swpO=0 conn=7 myRSS=2246 php=30 phpRSS=1330 ap=63 tcp=51 topuser=evolution 2026-08-18 15:36:17 L1=4.15 run=4 blk=0 avail=6184 (52.7%) swpO=1 conn=9 myRSS=2246 php=30 phpRSS=1432 ap=64 tcp=42 topuser=evolution 2026-08-18 15:36:17 L1=4.15 run=7 blk=0 avail=6174 (52.6%) swpO=1 conn=9 myRSS=2246 php=30 phpRSS=1437 ap=64 tcp=42 topuser=evolution 2026-08-18 15:36:27 L1=5.37 run=10 blk=0 avail=6148 (52.4%) swpO=1 conn=12 myRSS=2246 php=32 phpRSS=1551 ap=60 tcp=44 topuser=evolution 2026-08-18 15:36:28 L1=5.37 run=6 blk=0 avail=6128 (52.3%) swpO=1 conn=11 myRSS=2246 php=32 phpRSS=1561 ap=60 tcp=43 topuser=evolution 2026-08-18 15:36:38 L1=5.70 run=7 blk=0 avail=6235 (53.2%) swpO=0 conn=10 myRSS=2246 php=31 phpRSS=1460 ap=57 tcp=41 topuser=evolution 2026-08-18 15:36:38 L1=5.70 run=5 blk=0 avail=6225 (53.1%) swpO=0 conn=10 myRSS=2246 php=30 phpRSS=1432 ap=57 tcp=41 topuser=evolution 2026-08-18 15:36:48 L1=5.53 run=7 blk=0 avail=6137 (52.3%) swpO=0 conn=10 myRSS=2246 php=30 phpRSS=1494 ap=63 tcp=38 topuser=evolution 2026-08-18 15:36:48 L1=5.53 run=15 blk=0 avail=6121 (52.2%) swpO=0 conn=10 myRSS=2246 php=30 phpRSS=1511 ap=63 tcp=39 topuser=evolution 2026-08-18 15:36:58 L1=5.36 run=8 blk=0 avail=6134 (52.3%) swpO=0 conn=11 myRSS=2246 php=31 phpRSS=1574 ap=58 tcp=35 topuser=evolution 2026-08-18 15:36:58 L1=5.36 run=9 blk=0 avail=6037 (51.5%) swpO=0 conn=12 myRSS=2246 php=32 phpRSS=1674 ap=58 tcp=38 topuser=evolution 2026-08-18 15:37:08 L1=5.52 run=13 blk=0 avail=6261 (53.4%) swpO=0 conn=12 myRSS=2246 php=32 phpRSS=1476 ap=55 tcp=41 topuser=evolution 2026-08-18 15:37:08 L1=5.52 run=6 blk=0 avail=6250 (53.3%) swpO=0 conn=11 myRSS=2246 php=31 phpRSS=1460 ap=55 tcp=40 topuser=evolution 2026-08-18 15:37:18 L1=5.95 run=4 blk=0 avail=6269 (53.5%) swpO=0 conn=10 myRSS=2247 php=30 phpRSS=1410 ap=54 tcp=40 topuser=evolution 2026-08-18 15:37:18 L1=5.95 run=5 blk=0 avail=6205 (52.9%) swpO=0 conn=11 myRSS=2247 php=31 phpRSS=1507 ap=54 tcp=40 topuser=evolution 2026-08-18 15:37:28 L1=5.94 run=3 blk=0 avail=6160 (52.5%) swpO=0 conn=10 myRSS=2247 php=30 phpRSS=1472 ap=61 tcp=39 topuser=evolution 2026-08-18 15:37:28 L1=5.94 run=5 blk=0 avail=6082 (51.9%) swpO=0 conn=11 myRSS=2247 php=31 phpRSS=1585 ap=61 tcp=37 topuser=evolution 2026-08-18 15:37:38 L1=5.72 run=10 blk=0 avail=6267 (53.4%) swpO=2 conn=10 myRSS=2247 php=31 phpRSS=1458 ap=55 tcp=45 topuser=evolution 2026-08-18 15:37:38 L1=5.72 run=6 blk=0 avail=6232 (53.1%) swpO=2 conn=9 myRSS=2247 php=30 phpRSS=1386 ap=57 tcp=45 topuser=evolution 2026-08-18 15:37:48 L1=5.63 run=5 blk=0 avail=6298 (53.7%) swpO=0 conn=10 myRSS=2247 php=31 phpRSS=1422 ap=58 tcp=41 topuser=evolution 2026-08-18 15:37:49 L1=5.63 run=16 blk=0 avail=6146 (52.4%) swpO=0 conn=11 myRSS=2247 php=34 phpRSS=1667 ap=58 tcp=40 topuser=evolution