INCIDENT 2026-08-20 09:27:19 trigger: swapout=2221/s ================================================================== load: 2.77 2.14 2.02 4/739 3594971 ncpu:10 mem_avail: 5507MB/11729MB (47.0%) swap_used:2341MB swapout:2221/s blocked(D):0 running:3 iowait:0.9% steal:0.0% php: 2 procs / 104MB heaviest user: evolution (1 procs, 66MB) apache: 133 procs tcp_estab: 72 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2961 nobody 132 2127 root 236 820 netdata 8 261 mailman 20 124 cpanellogin 1 94 evolution 7 88 vinesit 1 39 dovenull 6 26 kurri 2 23 wp-toolkit 6 19 zabbix 1 15 named 1 15 lowrange 1 12 nscd 1 7 dovecot 3 7 mailnull 1 5 cpanelconnecttrack 1 3 dbus 1 2 polkitd 1 1 --- php workers by user --- USER PROCS RSS_MB evolution 1 66 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4420 MB Active(file): 3419 MB Inactive(file): 1074 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 405 MB CommitLimit: 9960 MB Committed_AS: 8795 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3248642 root 08:16:03 6272 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 3032844 10.8 Ssl 5-01:36:43 /usr/sbin/mariadbd 1220 1 netdata 209848 2.5 Ssl 51-23:17:25 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3298114 3290507 root 180780 0.0 S 06:51:44 spamd child 3298115 3290507 root 135392 0.0 S 06:51:44 spamd child 3290507 1 root 126408 0.0 Ss 07:04:33 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3141574 1353308 cpanellogin 96876 0.0 S 09:27:10 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 2575382 1 root 70464 0.0 Ss 5-01:36:46 /usr/lib/systemd/systemd-journald 3594907 3594772 evolution 68164 15.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 45716 0.0 Sl 51-23:17:24 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41908 0.1 Ss 51-23:17:24 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 34120 0.1 Sl 51-23:17:20 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3289952 1 root 27576 0.0 Ss 07:05:06 lfd - sleeping 1463 1 root 25900 0.0 Ss 51-23:17:24 tailwatchd 1353308 1 root 23704 0.0 Ss 29-06:45:55 cpsrvd (SSL) - waiting for connections 3582704 1276780 nobody 22844 0.0 S 12:02 /usr/sbin/httpd -k start 3592042 1276780 nobody 21088 0.0 S 02:52 /usr/sbin/httpd -k start 3590207 1276780 nobody 20728 0.0 S 04:57 /usr/sbin/httpd -k start 3590525 1276780 nobody 20416 0.1 S 04:33 /usr/sbin/httpd -k start 3590532 1276780 nobody 20316 0.0 S 04:33 /usr/sbin/httpd -k start 3591508 1276780 nobody 19932 0.0 S 03:33 /usr/sbin/httpd -k start 3592410 1276780 nobody 19584 0.0 S 02:21 /usr/sbin/httpd -k start 3592480 1276780 nobody 19584 0.0 S 02:20 /usr/sbin/httpd -k start 3594034 1276780 nobody 19568 0.0 S 00:49 /usr/sbin/httpd -k start 3592501 1276780 nobody 19460 0.0 S 02:19 /usr/sbin/httpd -k start 3594773 1276780 nobody 19384 0.0 S 00:06 /usr/sbin/httpd -k start 3593654 1276780 nobody 19328 0.0 S 01:17 /usr/sbin/httpd -k start 3593336 1276780 nobody 19312 0.1 S 01:32 /usr/sbin/httpd -k start 3594054 1276780 nobody 19040 0.0 S 00:48 /usr/sbin/httpd -k start 3593618 1276780 nobody 18988 0.0 S 01:18 /usr/sbin/httpd -k start 3591527 1276780 nobody 18904 0.0 S 03:32 /usr/sbin/httpd -k start 3594078 1276780 nobody 18800 0.1 S 00:47 /usr/sbin/httpd -k start 3593973 1276780 nobody 18764 0.0 S 00:51 /usr/sbin/httpd -k start 3592478 1276780 nobody 18724 0.0 S 02:20 /usr/sbin/httpd -k start 3594070 1276780 nobody 18700 0.0 S 00:47 /usr/sbin/httpd -k start 3593324 1276780 nobody 18660 0.0 S 01:33 /usr/sbin/httpd -k start 3594816 1276780 nobody 18608 0.2 S 00:05 /usr/sbin/httpd -k start 3594076 1276780 nobody 18452 0.0 S 00:47 /usr/sbin/httpd -k start 3594746 1276780 nobody 18432 0.1 S 00:06 /usr/sbin/httpd -k start 3594810 1276780 nobody 18432 0.2 S 00:05 /usr/sbin/httpd -k start 3594752 1276780 nobody 18364 0.1 S 00:06 /usr/sbin/httpd -k start 3594777 1276780 nobody 18360 0.0 S 00:06 /usr/sbin/httpd -k start 3594074 1276780 nobody 18192 0.1 S 00:47 /usr/sbin/httpd -k start 3594049 1276780 nobody 18180 0.0 S 00:48 /usr/sbin/httpd -k start 3594037 1276780 nobody 18100 0.0 S 00:49 /usr/sbin/httpd -k start 3594824 1276780 nobody 18000 0.0 S 00:05 /usr/sbin/httpd -k start 3593666 1276780 nobody 17944 0.0 S 01:16 /usr/sbin/httpd -k start 3594765 1276780 nobody 17900 0.1 S 00:06 /usr/sbin/httpd -k start 3594764 1276780 nobody 17872 0.0 S 00:06 /usr/sbin/httpd -k start 3594766 1276780 nobody 17856 0.0 S 00:06 /usr/sbin/httpd -k start 3594815 1276780 nobody 17820 0.2 S 00:05 /usr/sbin/httpd -k start 3594767 1276780 nobody 17816 0.0 S 00:06 /usr/sbin/httpd -k start 3594754 1276780 nobody 17800 0.3 S 00:06 /usr/sbin/httpd -k start 3592509 1276780 nobody 17788 0.0 S 02:19 /usr/sbin/httpd -k start 3594760 1276780 nobody 17764 0.0 S 00:06 /usr/sbin/httpd -k start 3594769 1276780 nobody 17760 0.1 S 00:06 /usr/sbin/httpd -k start 3593796 1276780 nobody 17748 0.0 S 01:07 /usr/sbin/httpd -k start 3594813 1276780 nobody 17740 0.2 S 00:05 /usr/sbin/httpd -k start 185104 2431 netdata 17624 2.1 Sl 7-12:53:43 /usr/libexec/netdata/plugins.d/apps.plugin 1 3594751 1276780 nobody 17596 0.5 S 00:06 /usr/sbin/httpd -k start 3594050 1276780 nobody 17528 0.0 S 00:48 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 15769600 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 15769599 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT sum(balance) as balance FROM invoices where clientid='12089' | +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 722 evolution/portal.evolutionerp.com.au-ssl_log 342 evolution/portal.evolutionerp.com.au 91 vinesit/westtankers.vinesit.com.au-ssl_log 88 vinesit/westtankers.vinesit.com.au 86 kurri/kurrimotorinn.com.au-ssl_log 46 aaa/aaadownunder.com.au-ssl_log 9 madalice/madalice.com.au-ssl_log 5 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 505 203.54.180.238 224 4.204.200.143 201 103.104.165.99 174 20.250.27.191 54 120.150.225.142 49 103.104.164.114 46 40.74.65.169 39 182.239.240.254 37 180.181.236.49 20 193.82.239.232 11 150.228.243.234 6 101.182.108.127 5 147.161.213.98 4 66.249.73.165 4 1.144.107.82 --- top request paths across all vhosts (last 3 min) --- 241 POST /functions.php 123 GET /app/ajax.php 75 GET /factory_session_checker.php 56 GET /index.php 46 GET /heartbeat.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 32 POST /plugins/csvexporter/plugin.php 29 GET //app/ajax.php 26 GET /app/templates/ajax.php 20 POST /app/ajax/selectFilterSingle.php 20 POST /app/ajax.php 18 POST /clienteditsave.php 18 POST /app/ajax/selectFilter.php 17 POST /jobeditsave.php 14 POST /quoteditsave.php 14 POST //functions.php 10 GET //index.php 9 POST //plugins/csvexporter/plugin.php 8 POST /itemModify.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 241 POST /functions.php 123 GET /app/ajax.php 52 GET /index.php 32 POST /plugins/csvexporter/plugin.php 29 GET //app/ajax.php 26 GET /app/templates/ajax.php 20 POST /app/ajax/selectFilterSingle.php 20 POST /app/ajax.php 18 POST /clienteditsave.php 18 POST /app/ajax/selectFilter.php 17 POST /jobeditsave.php 14 POST /quoteditsave.php -- last 10 requests -- 203.54.180.238 - - [20/Aug/2026:09:27:18 +1000] "GET //app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D29437%26tab%3Djobeditinv&call=getUserSetting&caller=ajaxSubmitLocal&seq=10244498726 HTTP/1.1" 200 168 "https://m 203.54.180.238 - - [20/Aug/2026:09:27:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=11084&tab=clienteditgeneral" "Mozilla/5.0 (Windows N 182.239.240.254 - - [20/Aug/2026:09:27:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=3460" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [20/Aug/2026:09:27:18 +1000] "POST //app/ajax/selectFilterSingle.php HTTP/1.1" 200 23954 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29437&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [20/Aug/2026:09:27:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 203.54.180.238 - - [20/Aug/2026:09:27:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=report&file=invstckmovement&itemid=3798" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [20/Aug/2026:09:27:19 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6817&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.164.114 - - [20/Aug/2026:09:27:19 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70081" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 182.239.240.254 - - [20/Aug/2026:09:27:19 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 12707 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=3460" "Mozilla/5.0 (Windows NT 10.0; Win64 203.54.180.238 - - [20/Aug/2026:09:27:19 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 2455 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29437&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win6 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 75 GET /factory_session_checker.php 46 GET /heartbeat.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 4 GET /index.php 3 POST /factory_functions.php 2 POST /portal/register 1 GET /yellow.php 1 GET /xxxx.php 1 GET /xxx.php 1 GET /xxw.php 1 GET /xx.php -- last 10 requests -- 203.54.180.238 - - [20/Aug/2026:09:27:05 +1000] "GET /heartbeat.php?sentAt=1787182024&bytes=106,134,59,200&_=1787174400456 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [20/Aug/2026:09:27:06 +1000] "GET /heartbeat.php?sentAt=1787182026&bytes=106,134,59,202&_=1787180972417 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [20/Aug/2026:09:27:08 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:27:09 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [20/Aug/2026:09:27:09 +1000] "GET /factory_session_joiner.php?id=34719 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [20/Aug/2026:09:27:11 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [20/Aug/2026:09:27:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:27:11 +1000] "GET /factory_session_joiner.php?id=34742 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [20/Aug/2026:09:27:13 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:27:13 +1000] "GET /heartbeat.php?sentAt=1787182027&bytes=106,134,59,203&_=1787181987825 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=18 == evolution/portal.evolutionerp.com.au == -- top paths -- 1 GET /yellow.php 1 GET /xxxx.php 1 GET /xxx.php 1 GET /x.php 1 GET /x7.php 1 GET /wto.php 1 GET /wsd.php 1 GET /ws34.php 1 GET /ws33.php 1 GET /wp-is.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-configs.php -- last 10 requests -- 4.204.200.143 - - [20/Aug/2026:09:26:09 +1000] "GET /a.php HTTP/1.1" 301 292 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:10 +1000] "GET /bless.php HTTP/1.1" 301 296 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:10 +1000] "GET /file9.php HTTP/1.1" 301 296 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:10 +1000] "GET /a2.php HTTP/1.1" 301 293 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:11 +1000] "GET /file4.php HTTP/1.1" 301 296 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:11 +1000] "GET /plss3.php HTTP/1.1" 301 296 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:12 +1000] "GET /file15.php HTTP/1.1" 301 297 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:12 +1000] "GET /wsd.php HTTP/1.1" 301 294 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:13 +1000] "GET /shell.php HTTP/1.1" 301 296 "-" "-" 4.204.200.143 - - [20/Aug/2026:09:26:13 +1000] "GET /akk.php HTTP/1.1" 301 294 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-20 09:24:58 L1=1.27 run=4 blk=0 avail=5842 (49.8%) swpO=0 conn=3 myRSS=3007 php=5 phpRSS=288 ap=46 tcp=54 topuser=evolution 2026-08-20 09:24:58 L1=1.27 run=5 blk=0 avail=5842 (49.8%) swpO=0 conn=4 myRSS=3007 php=5 phpRSS=288 ap=46 tcp=54 topuser=evolution 2026-08-20 09:25:08 L1=1.45 run=5 blk=0 avail=5509 (47.0%) swpO=0 conn=3 myRSS=3007 php=8 phpRSS=590 ap=64 tcp=58 topuser=evolution 2026-08-20 09:25:08 L1=1.45 run=6 blk=0 avail=5491 (46.8%) swpO=0 conn=4 myRSS=3007 php=8 phpRSS=609 ap=64 tcp=58 topuser=evolution 2026-08-20 09:25:19 L1=1.91 run=10 blk=0 avail=5642 (48.1%) swpO=0 conn=4 myRSS=3007 php=7 phpRSS=451 ap=61 tcp=55 topuser=evolution 2026-08-20 09:25:19 L1=1.91 run=9 blk=0 avail=5644 (48.1%) swpO=0 conn=6 myRSS=3007 php=7 phpRSS=448 ap=61 tcp=54 topuser=evolution 2026-08-20 09:25:29 L1=2.13 run=3 blk=0 avail=5882 (50.1%) swpO=0 conn=4 myRSS=3007 php=5 phpRSS=227 ap=56 tcp=54 topuser=evolution 2026-08-20 09:25:29 L1=2.13 run=3 blk=0 avail=5882 (50.1%) swpO=0 conn=6 myRSS=3007 php=5 phpRSS=227 ap=56 tcp=54 topuser=evolution 2026-08-20 09:25:39 L1=2.22 run=4 blk=0 avail=6022 (51.3%) swpO=0 conn=6 myRSS=3007 php=0 phpRSS=0 ap=50 tcp=39 topuser=- 2026-08-20 09:25:39 L1=2.22 run=3 blk=0 avail=6022 (51.3%) swpO=0 conn=4 myRSS=3007 php=0 phpRSS=0 ap=50 tcp=39 topuser=- 2026-08-20 09:25:49 L1=2.19 run=5 blk=0 avail=5934 (50.6%) swpO=0 conn=6 myRSS=3007 php=2 phpRSS=136 ap=51 tcp=45 topuser=evolution 2026-08-20 09:25:49 L1=2.19 run=4 blk=0 avail=5930 (50.6%) swpO=0 conn=4 myRSS=3007 php=2 phpRSS=136 ap=51 tcp=45 topuser=evolution 2026-08-20 09:25:59 L1=2.16 run=2 blk=0 avail=6052 (51.6%) swpO=0 conn=6 myRSS=3007 php=0 phpRSS=0 ap=44 tcp=51 topuser=- 2026-08-20 09:25:59 L1=2.16 run=2 blk=0 avail=6050 (51.6%) swpO=0 conn=1 myRSS=3007 php=0 phpRSS=0 ap=44 tcp=51 topuser=- 2026-08-20 09:26:09 L1=2.37 run=1 blk=0 avail=6061 (51.7%) swpO=0 conn=6 myRSS=3007 php=0 phpRSS=0 ap=46 tcp=42 topuser=- 2026-08-20 09:26:09 L1=2.37 run=3 blk=0 avail=6060 (51.7%) swpO=0 conn=1 myRSS=3007 php=1 phpRSS=21 ap=46 tcp=42 topuser=vinesit 2026-08-20 09:26:19 L1=2.16 run=4 blk=0 avail=5967 (50.9%) swpO=0 conn=2 myRSS=3007 php=1 phpRSS=138 ap=43 tcp=39 topuser=alison 2026-08-20 09:26:19 L1=2.16 run=4 blk=0 avail=5965 (50.9%) swpO=0 conn=1 myRSS=3007 php=1 phpRSS=140 ap=42 tcp=39 topuser=alison 2026-08-20 09:26:29 L1=1.90 run=3 blk=0 avail=6097 (52.0%) swpO=0 conn=2 myRSS=3007 php=0 phpRSS=0 ap=39 tcp=49 topuser=- 2026-08-20 09:26:29 L1=1.90 run=3 blk=0 avail=6096 (52.0%) swpO=0 conn=1 myRSS=3007 php=0 phpRSS=0 ap=39 tcp=49 topuser=- 2026-08-20 09:26:39 L1=1.68 run=1 blk=0 avail=5953 (50.8%) swpO=0 conn=2 myRSS=3007 php=0 phpRSS=0 ap=61 tcp=50 topuser=- 2026-08-20 09:26:39 L1=1.68 run=2 blk=0 avail=5953 (50.8%) swpO=0 conn=1 myRSS=3007 php=0 phpRSS=0 ap=61 tcp=50 topuser=- 2026-08-20 09:26:49 L1=1.87 run=3 blk=0 avail=5895 (50.3%) swpO=0 conn=2 myRSS=3008 php=1 phpRSS=132 ap=53 tcp=48 topuser=tubesupplies 2026-08-20 09:26:49 L1=1.87 run=3 blk=0 avail=5893 (50.2%) swpO=0 conn=1 myRSS=3008 php=1 phpRSS=135 ap=53 tcp=48 topuser=tubesupplies 2026-08-20 09:26:59 L1=1.66 run=3 blk=0 avail=6043 (51.5%) swpO=1 conn=2 myRSS=3008 php=1 phpRSS=67 ap=43 tcp=35 topuser=evolution 2026-08-20 09:26:59 L1=1.66 run=5 blk=0 avail=6041 (51.5%) swpO=1 conn=1 myRSS=3008 php=1 phpRSS=67 ap=43 tcp=35 topuser=evolution 2026-08-20 09:27:09 L1=1.49 run=1 blk=0 avail=6065 (51.7%) swpO=0 conn=2 myRSS=3008 php=0 phpRSS=0 ap=45 tcp=105 topuser=- 2026-08-20 09:27:09 L1=1.49 run=2 blk=0 avail=6064 (51.7%) swpO=0 conn=1 myRSS=3008 php=0 phpRSS=0 ap=45 tcp=105 topuser=- 2026-08-20 09:27:19 L1=2.77 run=3 blk=0 avail=5507 (47.0%) swpO=2221 conn=2 myRSS=2961 php=2 phpRSS=104 ap=133 tcp=72 topuser=evolution 2026-08-20 09:27:19 L1=2.77 run=5 blk=0 avail=5498 (46.9%) swpO=2221 conn=2 myRSS=2961 php=2 phpRSS=114 ap=133 tcp=72 topuser=evolution