INCIDENT 2026-08-24 09:47:24 trigger: swapout=3500/s ================================================================== load: 2.70 2.28 1.99 4/1197 3408107 ncpu:10 mem_avail: 5165MB/11729MB (44.0%) swap_used:3582MB swapout:3500/s blocked(D):0 running:2 iowait:2.5% steal:0.0% php: 3 procs / 160MB heaviest user: evolution (3 procs, 160MB) apache: 147 procs tcp_estab: 152 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2977 nobody 146 2503 root 238 935 evolution 14 363 netdata 8 250 mailman 20 93 cpanellogin 1 63 mailnull 5 57 dovenull 6 26 kurri 2 22 wp-toolkit 6 20 zabbix 1 15 alison 1 13 corpkicks 1 12 candyfabcom 1 12 named 1 11 aaa 1 10 nscd 1 7 dovecot 3 7 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB evolution 3 161 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3361 MB Active(file): 1963 MB Inactive(file): 1327 MB Dirty: 4 MB Writeback: 0 MB SReclaimable: 422 MB CommitLimit: 9960 MB Committed_AS: 13091 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3032611 root 08:36:08 4068 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 3048836 9.4 Ssl 9-01:56:51 /usr/sbin/mariadbd 1220 1 netdata 200488 2.5 Ssl 55-23:37:33 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2575382 1 root 177316 0.0 Ss 9-01:56:54 /usr/lib/systemd/systemd-journald 3407316 3407315 evolution 175764 12.9 Sl 00:24 /usr/local/bin/wkhtmltopdf --encoding utf-8 --title Electrical Test and Tag Report - Garvan Institute --header-html https://my.evolutio 3080743 3075441 root 166852 0.1 S 07:14:48 spamd child 3080744 3075441 root 151820 0.0 S 07:14:48 spamd child 3075441 1 root 136140 0.0 Ss 07:24:27 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3408062 3407875 evolution 68440 16.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3313479 1353308 cpanellogin 64764 0.0 S 01:36:57 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 3407311 3406163 evolution 54756 0.5 S 00:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 45544 0.0 Sl 55-23:37:32 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3407995 3406180 evolution 43200 0.5 S 00:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 39244 0.0 Ss 33-07:06:03 cpsrvd (SSL) - waiting for connections 3408143 1353308 root 34804 0.0 D 00:00 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 31428 0.1 Sl 55-23:37:28 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 28256 0.1 Ss 55-23:37:32 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3408154 3407879 evolution 27776 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3074682 1 root 24936 0.0 Ss 07:25:01 lfd - sleeping 1463 1 root 23556 0.0 Ss 55-23:37:32 tailwatchd 3404867 1276780 nobody 21524 0.0 S 02:48 /usr/sbin/httpd -k start 3405033 1276780 nobody 21176 0.0 S 02:37 /usr/sbin/httpd -k start 3406099 1276780 nobody 21068 0.0 S 01:57 /usr/sbin/httpd -k start 3404551 1276780 nobody 20840 0.0 S 03:11 /usr/sbin/httpd -k start 3404589 1276780 nobody 20652 0.0 S 03:08 /usr/sbin/httpd -k start 3404853 1276780 nobody 20476 0.0 S 02:50 /usr/sbin/httpd -k start 3404886 1276780 nobody 20464 0.0 S 02:47 /usr/sbin/httpd -k start 3406120 1276780 nobody 20420 0.0 S 01:57 /usr/sbin/httpd -k start 3403770 1276780 nobody 20360 0.0 S 04:10 /usr/sbin/httpd -k start 3406079 1276780 nobody 20312 0.0 S 01:58 /usr/sbin/httpd -k start 3405670 1276780 nobody 20272 0.0 S 02:02 /usr/sbin/httpd -k start 3406063 1276780 nobody 20188 0.0 S 01:59 /usr/sbin/httpd -k start 3406074 1276780 nobody 20132 0.0 S 01:58 /usr/sbin/httpd -k start 3406175 1276780 nobody 20056 0.0 S 01:55 /usr/sbin/httpd -k start 3403903 1276780 nobody 20016 0.0 S 03:58 /usr/sbin/httpd -k start 3406174 1276780 nobody 19936 0.0 S 01:55 /usr/sbin/httpd -k start 3406080 1276780 nobody 19908 0.0 S 01:58 /usr/sbin/httpd -k start 3407853 1276780 nobody 19728 0.0 S 00:19 /usr/sbin/httpd -k start 3404009 1276780 nobody 19688 0.0 S 03:48 /usr/sbin/httpd -k start 3407856 1276780 nobody 19652 0.0 S 00:19 /usr/sbin/httpd -k start 3405017 1276780 nobody 19488 0.0 S 02:38 /usr/sbin/httpd -k start 3406077 1276780 nobody 19372 0.0 S 01:58 /usr/sbin/httpd -k start 3406114 1276780 nobody 19360 0.0 S 01:57 /usr/sbin/httpd -k start 3406173 1276780 nobody 19324 0.0 S 01:55 /usr/sbin/httpd -k start 3407909 1276780 nobody 19236 0.1 S 00:16 /usr/sbin/httpd -k start 3406085 1276780 nobody 19160 0.0 S 01:58 /usr/sbin/httpd -k start 3407924 1276780 nobody 18984 0.1 S 00:15 /usr/sbin/httpd -k start 3404882 1276780 nobody 18892 0.0 S 02:47 /usr/sbin/httpd -k start 3406126 1276780 nobody 18728 0.0 S 01:57 /usr/sbin/httpd -k start 3407855 1276780 nobody 18728 0.0 S 00:19 /usr/sbin/httpd -k start 3406127 1276780 nobody 18660 0.0 S 01:57 /usr/sbin/httpd -k start 3402821 1276780 nobody 18632 0.0 S 05:18 /usr/sbin/httpd -k start 3406082 1276780 nobody 18492 0.0 S 01:58 /usr/sbin/httpd -k start 3406109 1276780 nobody 18464 0.0 S 01:57 /usr/sbin/httpd -k start 3406119 1276780 nobody 18400 0.0 S 01:57 /usr/sbin/httpd -k start 3406118 1276780 nobody 18392 0.0 S 01:57 /usr/sbin/httpd -k start 3406177 1276780 nobody 18388 0.0 S 01:55 /usr/sbin/httpd -k start 185104 2431 netdata 18360 2.1 Sl 11-13:13:51 /usr/libexec/netdata/plugins.d/apps.plugin 1 3406098 1276780 nobody 18340 0.0 S 01:57 /usr/sbin/httpd -k start 3406108 1276780 nobody 18324 0.0 S 01:57 /usr/sbin/httpd -k start 3406124 1276780 nobody 18296 0.0 S 01:57 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 3408154 D - /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- mariadb processlist (non-sleeping) --- +----------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 24862061 | root | 220-1717576723 | Execute | 0 | Sending data | SELECT billitems.*, (SELECT bills.dateentered from bills where id = billitems.billid ) as dateentered, jobInventory.parentid, jobInventory.referenceid FROM billitems, jobInventory WHERE billitems.jobitemid = jobInventory.id AND jobInventory.jobid | | 24862059 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 1162 evolution/portal.evolutionerp.com.au-ssl_log 234 madalice/madalice.com.au-ssl_log 14 corpkicks/corporatekicks.com.au-ssl_log 6 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 699 118.127.40.55 408 203.54.180.238 90 103.104.165.99 49 103.104.164.114 41 110.174.119.207 30 150.228.163.253 21 182.239.240.254 13 180.181.236.49 11 1.145.68.216 10 120.150.225.142 9 165.225.114.214 6 1.145.74.198 3 52.167.144.209 2 65.181.13.107 2 52.167.144.183 --- top request paths across all vhosts (last 3 min) --- 349 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713397831.html 347 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713410864.html 162 POST /functions.php 77 GET /factory_session_checker.php 77 GET /app/ajax.php 49 GET /index.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 38 GET /heartbeat.php 25 POST //functions.php 22 POST /plugins/csvexporter/plugin.php 17 POST /quoteditsave.php 15 POST /app/ajax/selectFilter.php 14 POST /app/ajax.php 12 POST /app/ajax/selectFilterSingle.php 11 POST /uploadsave.php 10 POST //purchaseaddsave.php 10 POST /portal/register 10 POST /clienteditsave.php 7 HEAD /index.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 349 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713397831.html 347 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713410864.html 162 POST /functions.php 77 GET /app/ajax.php 36 GET /index.php 25 POST //functions.php 22 POST /plugins/csvexporter/plugin.php 17 POST /quoteditsave.php 15 POST /app/ajax/selectFilter.php 14 POST /app/ajax.php 12 POST /app/ajax/selectFilterSingle.php 10 POST //purchaseaddsave.php -- last 10 requests -- 110.174.119.207 - - [24/Aug/2026:09:47:20 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D36855%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=11726589657 HTTP/1.1" 200 171 "https: 110.174.119.207 - - [24/Aug/2026:09:47:20 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36855§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win 203.54.180.238 - - [24/Aug/2026:09:47:20 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 287 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4697§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 120.150.225.142 - - [24/Aug/2026:09:47:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 110.174.119.207 - - [24/Aug/2026:09:47:21 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21115 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36855§ionid=0" "Mozilla/5.0 (Windows NT 10.0 110.174.119.207 - - [24/Aug/2026:09:47:22 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36855§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 203.54.180.238 - - [24/Aug/2026:09:47:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28288&tab=jobeditmf" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [24/Aug/2026:09:47:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78666" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 203.54.180.238 - - [24/Aug/2026:09:47:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78621" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 103.104.164.114 - - [24/Aug/2026:09:47:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 77 GET /factory_session_checker.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 38 GET /heartbeat.php 13 GET /index.php 11 POST /uploadsave.php 10 POST /portal/register 4 GET /uploadsave.php 1 POST /inventory.php 1 POST /factory_functions.php 1 GET /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [24/Aug/2026:09:47:17 +1000] "GET /index.php?page=delivery_commit&id=33867 HTTP/1.1" 200 91257 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33867" "Mozilla/5.0 (Linux; Android 1.145.68.216 - - [24/Aug/2026:09:47:14 +1000] "POST /uploadsave.php HTTP/1.1" 200 24 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=16350" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KH 203.54.180.238 - - [24/Aug/2026:09:47:16 +1000] "GET /heartbeat.php?sentAt=1787528836&bytes=106,139,134,132&_=1787528745873 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=1 1.145.68.216 - - [24/Aug/2026:09:47:14 +1000] "POST /uploadsave.php HTTP/1.1" 200 24 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=16350" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KH 203.54.180.238 - - [24/Aug/2026:09:47:17 +1000] "GET /uploadsave.php?call=get_uploads&sourceId=33867&subType=delivery_commit HTTP/1.1" 200 619 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33867" 1.145.68.216 - - [24/Aug/2026:09:47:18 +1000] "GET /uploadsave.php?call=get_uploads&sourceId=16350&subType=delivery_commit HTTP/1.1" 200 489 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=16350" "M 1.145.68.216 - - [24/Aug/2026:09:47:15 +1000] "POST /uploadsave.php HTTP/1.1" 200 24 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=16350" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KH 1.145.68.216 - - [24/Aug/2026:09:47:15 +1000] "POST /uploadsave.php HTTP/1.1" 200 24 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=16350" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KH 203.54.180.238 - - [24/Aug/2026:09:47:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [24/Aug/2026:09:47:21 +1000] "GET /heartbeat.php?sentAt=1787528835&bytes=106,139,134,131&_=1787528019220 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == madalice/madalice.com.au-ssl_log == -- top paths -- 3 POST /wp-admin/admin-ajax.php 2 GET /store/toys-kids-custom-shoes/ 2 GET / 1 POST /wp-login.php 1 GET /store/travis-butterfly-af1/ 1 GET /store/lover-custom-nike-dunks/ 1 GET /store/hand-painted-nike-af1-sketch/ 1 GET /store/hand-painted-nike-af1-seaeagles/ 1 GET /store/hand-painted-nike-af1-roses/ 1 GET /store/custom-suede-jordans/ -- last 10 requests -- 2a03:2880:f802:1a:: - - [24/Aug/2026:09:45:19 +1000] "GET /?p=8811 HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; m 114.119.137.101 - - [24/Aug/2026:09:45:38 +1000] "GET /store/hand-painted-nike-af1-seaeagles/?amprating=5&rating=2&wcpr_page=2&wcpr_rating=2 HTTP/1.1" 404 30656 "https://madalice.com.au/store/hand-painted-nike-af1-seaeag 98.88.240.18 - - [24/Aug/2026:09:45:39 +1000] "POST /wp-login.php HTTP/1.1" 503 6745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 114.119.140.234 - - [24/Aug/2026:09:45:45 +1000] "GET /store/hand-painted-nike-af1-roses/?amp%3Bwcpr_image=1&rating=3&wcpr_rating=4 HTTP/1.1" 404 30655 "https://madalice.com.au/store/hand-painted-nike-af1-roses/?amp%3Bwc 114.119.137.101 - - [24/Aug/2026:09:46:10 +1000] "GET /store/travis-butterfly-af1/?amp%3Bverified=1&wcpr_rating=5&image=1&wcpr_page=4 HTTP/1.1" 404 30662 "https://madalice.com.au/store/travis-butterfly-af1/?amp%3Bverifie 114.119.131.88 - - [24/Aug/2026:09:46:31 +1000] "GET /store/toys-kids-custom-shoes/?verified=1&wcpr_page=2&wcpr_rating=4 HTTP/1.1" 200 49029 "https://madalice.com.au/store/toys-kids-custom-shoes/?verified=1&wcpr_page=2&w 114.119.143.14 - - [24/Aug/2026:09:46:53 +1000] "GET /store/toys-kids-custom-shoes/?amp%3Brating=2&wcpr_rating=3 HTTP/1.1" 200 49010 "https://madalice.com.au/store/toys-kids-custom-shoes/?amp%3Brating=2&wcpr_rating=3" "M 2001:8004:14b3:854f:658d:23ba:a589:c64f - - [24/Aug/2026:09:47:02 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 216.73.216.252 - - [24/Aug/2026:09:47:15 +1000] "GET /?p=29517 HTTP/1.1" 301 1 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.252 - - [24/Aug/2026:09:47:14 +1000] "GET /store/custom-suede-jordans/ HTTP/1.1" 200 44400 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" --- last 30 samples (run-up to this incident) --- 2026-08-24 09:45:03 L1=2.07 run=4 blk=0 avail=5505 (46.9%) swpO=0 conn=6 myRSS=3072 php=5 phpRSS=559 ap=52 tcp=45 topuser=madalice 2026-08-24 09:45:03 L1=2.07 run=4 blk=0 avail=5462 (46.6%) swpO=0 conn=1 myRSS=3072 php=5 phpRSS=600 ap=52 tcp=45 topuser=madalice 2026-08-24 09:45:13 L1=2.37 run=3 blk=0 avail=5966 (50.9%) swpO=926 conn=6 myRSS=3049 php=3 phpRSS=149 ap=42 tcp=37 topuser=evolution 2026-08-24 09:45:13 L1=2.37 run=4 blk=0 avail=5954 (50.8%) swpO=926 conn=1 myRSS=3049 php=2 phpRSS=139 ap=42 tcp=37 topuser=evolution 2026-08-24 09:45:23 L1=2.31 run=2 blk=0 avail=5841 (49.8%) swpO=0 conn=6 myRSS=3049 php=2 phpRSS=88 ap=40 tcp=817 topuser=evolution 2026-08-24 09:45:24 L1=2.31 run=1 blk=0 avail=5841 (49.8%) swpO=0 conn=2 myRSS=3049 php=1 phpRSS=53 ap=40 tcp=817 topuser=evolution 2026-08-24 09:45:34 L1=2.11 run=1 blk=0 avail=5026 (42.9%) swpO=0 conn=6 myRSS=3049 php=1 phpRSS=53 ap=153 tcp=640 topuser=evolution 2026-08-24 09:45:34 L1=2.11 run=2 blk=0 avail=5024 (42.8%) swpO=0 conn=2 myRSS=3049 php=1 phpRSS=53 ap=153 tcp=641 topuser=evolution 2026-08-24 09:45:44 L1=2.58 run=3 blk=0 avail=5018 (42.8%) swpO=801 conn=6 myRSS=3036 php=5 phpRSS=205 ap=150 tcp=167 topuser=evolution 2026-08-24 09:45:44 L1=2.58 run=8 blk=0 avail=4998 (42.6%) swpO=801 conn=2 myRSS=3036 php=4 phpRSS=203 ap=150 tcp=167 topuser=evolution 2026-08-24 09:45:54 L1=2.33 run=4 blk=0 avail=5125 (43.7%) swpO=0 conn=6 myRSS=3036 php=2 phpRSS=95 ap=140 tcp=196 topuser=evolution 2026-08-24 09:45:54 L1=2.33 run=3 blk=0 avail=5125 (43.7%) swpO=0 conn=2 myRSS=3036 php=2 phpRSS=95 ap=140 tcp=196 topuser=evolution 2026-08-24 09:46:04 L1=2.36 run=3 blk=0 avail=5178 (44.1%) swpO=0 conn=2 myRSS=3036 php=2 phpRSS=95 ap=130 tcp=112 topuser=evolution 2026-08-24 09:46:04 L1=2.36 run=4 blk=0 avail=5178 (44.1%) swpO=0 conn=2 myRSS=3036 php=2 phpRSS=95 ap=130 tcp=111 topuser=evolution 2026-08-24 09:46:14 L1=2.38 run=4 blk=0 avail=5220 (44.5%) swpO=0 conn=2 myRSS=3037 php=4 phpRSS=180 ap=120 tcp=110 topuser=evolution 2026-08-24 09:46:14 L1=2.38 run=7 blk=0 avail=5197 (44.3%) swpO=0 conn=2 myRSS=3037 php=4 phpRSS=205 ap=120 tcp=110 topuser=evolution 2026-08-24 09:46:24 L1=2.72 run=5 blk=0 avail=5311 (45.3%) swpO=0 conn=2 myRSS=3037 php=2 phpRSS=95 ap=110 tcp=120 topuser=evolution 2026-08-24 09:46:24 L1=2.72 run=4 blk=0 avail=5310 (45.3%) swpO=0 conn=2 myRSS=3037 php=2 phpRSS=95 ap=110 tcp=121 topuser=evolution 2026-08-24 09:46:34 L1=2.61 run=8 blk=0 avail=5056 (43.1%) swpO=0 conn=2 myRSS=3037 php=5 phpRSS=473 ap=105 tcp=174 topuser=madalice 2026-08-24 09:46:34 L1=2.61 run=5 blk=0 avail=5033 (42.9%) swpO=0 conn=2 myRSS=3037 php=5 phpRSS=484 ap=105 tcp=174 topuser=madalice 2026-08-24 09:46:44 L1=2.52 run=2 blk=0 avail=5371 (45.8%) swpO=0 conn=2 myRSS=3037 php=2 phpRSS=95 ap=101 tcp=159 topuser=evolution 2026-08-24 09:46:44 L1=2.52 run=3 blk=0 avail=5378 (45.9%) swpO=0 conn=2 myRSS=3037 php=2 phpRSS=95 ap=100 tcp=158 topuser=evolution 2026-08-24 09:46:54 L1=2.35 run=3 blk=0 avail=5604 (47.8%) swpO=0 conn=2 myRSS=3037 php=2 phpRSS=136 ap=93 tcp=46 topuser=madalice 2026-08-24 09:46:54 L1=2.35 run=3 blk=0 avail=5616 (47.9%) swpO=0 conn=2 myRSS=3037 php=1 phpRSS=114 ap=93 tcp=46 topuser=madalice 2026-08-24 09:47:04 L1=2.22 run=2 blk=0 avail=5407 (46.1%) swpO=0 conn=3 myRSS=3037 php=2 phpRSS=229 ap=84 tcp=801 topuser=madalice 2026-08-24 09:47:04 L1=2.22 run=3 blk=0 avail=5398 (46.0%) swpO=0 conn=2 myRSS=3037 php=2 phpRSS=234 ap=84 tcp=800 topuser=madalice 2026-08-24 09:47:14 L1=1.88 run=1 blk=0 avail=5050 (43.1%) swpO=0 conn=3 myRSS=3037 php=1 phpRSS=53 ap=153 tcp=480 topuser=evolution 2026-08-24 09:47:14 L1=1.88 run=4 blk=0 avail=5046 (43.0%) swpO=0 conn=2 myRSS=3037 php=1 phpRSS=53 ap=153 tcp=480 topuser=evolution 2026-08-24 09:47:24 L1=2.70 run=2 blk=0 avail=5165 (44.0%) swpO=3500 conn=3 myRSS=2977 php=3 phpRSS=160 ap=147 tcp=152 topuser=evolution 2026-08-24 09:47:24 L1=2.70 run=2 blk=0 avail=5168 (44.1%) swpO=3500 conn=3 myRSS=2977 php=3 phpRSS=161 ap=147 tcp=152 topuser=evolution