INCIDENT 2026-09-03 12:24:09 trigger: php_rss=1500MB ================================================================== load: 0.95 1.71 1.99 1/728 3741142 ncpu:10 mem_avail: 7365MB/13777MB (53.5%) swap_used:1551MB swapout:0/s blocked(D):0 running:1 iowait:0.1% steal:0.0% php: 21 procs / 1500MB heaviest user: madalice (7 procs, 941MB) apache: 52 procs tcp_estab: 52 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2804 root 251 978 madalice 7 941 nobody 51 846 evolution 21 545 netdata 8 237 wp-toolkit 3 71 cpanellogin 1 66 aaa 3 35 mailman 20 27 dovenull 6 26 mailnull 2 22 polkitd 1 13 alison 1 13 kurri 1 11 candyfabcom 1 11 zabbix 1 10 named 1 6 dovecot 3 6 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 7 941 evolution 13 529 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5606 MB Active(file): 3889 MB Inactive(file): 1828 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 504 MB CommitLimit: 10984 MB Committed_AS: 9994 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 2-10:01:41 4552 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2872292 15.1 Ssl 22:09:56 /usr/sbin/mariadbd 1596047 1543747 root 199556 0.1 S 09:46:21 spamd child 1542443 1 netdata 169816 2.5 Ssl 10:01:46 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3740101 1542510 madalice 163488 14.4 S 00:52 php-fpm: pool madalice_com_au 3740464 1542510 madalice 156448 14.4 S 00:32 php-fpm: pool madalice_com_au 3741090 1542510 madalice 132164 41.3 S 00:03 php-fpm: pool madalice_com_au 3741092 1542510 madalice 129392 42.3 S 00:03 php-fpm: pool madalice_com_au 3741087 1542510 madalice 129212 41.6 S 00:03 php-fpm: pool madalice_com_au 1596048 1543747 root 127084 0.0 S 09:46:21 spamd child 3741091 1542510 madalice 126740 41.3 S 00:03 php-fpm: pool madalice_com_au 3741088 1542510 madalice 126652 40.3 S 00:03 php-fpm: pool madalice_com_au 1543747 1 root 119188 0.0 Ss 10:01:16 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3737043 3718390 evolution 90312 0.1 S 03:51 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3689900 1353308 cpanellogin 68332 0.0 S 12:28 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 509266 1 root 54184 0.0 Ss 6-10:04:27 /usr/lib/systemd/systemd-journald 509236 509098 root 46520 0.0 Sl 6-10:04:27 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3737973 3721602 evolution 43352 0.0 S 03:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3739351 3739309 evolution 43280 0.0 S 01:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3737263 3721626 evolution 43164 0.0 S 03:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1542981 1542551 netdata 43104 0.1 Sl 10:01:42 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3737612 3721555 evolution 43076 0.0 S 03:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42188 0.1 Ss 43-09:42:53 cpsrvd (SSL) - waiting for connections 3737949 3737495 evolution 40988 0.0 S 03:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3737081 3721599 evolution 40972 0.0 S 03:50 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3739585 3719888 evolution 40968 0.0 S 01:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1542487 1 wp-toolkit 40952 0.0 Ss 10:01:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1469 1 root 40128 0.1 Ss 66-02:14:22 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3737951 3737496 evolution 39308 0.0 S 03:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3737994 3737532 evolution 39204 0.0 S 03:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3737688 3721476 evolution 39176 0.0 S 03:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3737991 3737536 evolution 38864 0.0 S 03:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3741113 1469 root 38308 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542072 1 root 31852 0.0 Ss 10:01:50 lfd - sleeping 1542510 1 root 29312 0.0 Ss 10:01:45 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3737822 3737692 root 25028 0.0 S 03:13 /usr/sbin/exim -q 1542531 1 wp-toolkit 24976 0.0 Ss 10:01:45 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1542141 1 root 24928 0.0 Ss 10:01:49 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1542188 1 root 23960 0.1 Ssl 10:01:48 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 23784 0.0 Ss 66-02:14:22 tailwatchd 3737488 506832 nobody 23404 0.1 S 03:25 /usr/sbin/httpd -k start 3739264 506832 nobody 21196 0.1 S 01:37 /usr/sbin/httpd -k start 3718390 506832 nobody 21092 0.0 S 07:55 /usr/sbin/httpd -k start 3719888 506832 nobody 20912 0.0 S 06:39 /usr/sbin/httpd -k start 3721486 506832 nobody 20908 0.0 S 05:29 /usr/sbin/httpd -k start 3737826 3737822 mailnull 20832 0.0 S 03:12 /usr/sbin/exim -q 3721584 506832 nobody 20452 0.0 S 05:28 /usr/sbin/httpd -k start 3721604 506832 nobody 20112 0.0 S 05:27 /usr/sbin/httpd -k start 3721572 506832 nobody 19848 0.0 S 05:28 /usr/sbin/httpd -k start 3737508 506832 nobody 19776 0.0 S 03:23 /usr/sbin/httpd -k start 3721476 506832 nobody 19772 0.0 S 05:29 /usr/sbin/httpd -k start 3738500 506832 nobody 19760 0.0 S 02:26 /usr/sbin/httpd -k start 3721626 506832 nobody 19644 0.0 S 05:26 /usr/sbin/httpd -k start 3738101 506832 nobody 19640 0.0 S 02:55 /usr/sbin/httpd -k start 3738512 506832 nobody 19580 0.1 S 02:25 /usr/sbin/httpd -k start 3739305 506832 nobody 19500 0.0 S 01:36 /usr/sbin/httpd -k start 3740567 506832 nobody 19328 0.1 S 00:29 /usr/sbin/httpd -k start 3737495 506832 nobody 19064 0.0 S 03:24 /usr/sbin/httpd -k start 3740061 506832 nobody 18168 0.1 S 00:54 /usr/sbin/httpd -k start 3739854 506832 nobody 18028 0.0 S 01:05 /usr/sbin/httpd -k start 3737496 506832 nobody 17800 0.0 S 03:24 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4760426 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 378 alison/alisonarts.com.au-ssl_log 313 evolution/support.evolutionerp.com.au 269 evolution/portal.evolutionerp.com.au-ssl_log 214 corpkicks/corporatekicks.com.au-ssl_log 177 evolution/app.evolutionerp.com.au-ssl_log 36 madalice/madalice.com.au-ssl_log 11 customc/customcentral.com.au-ssl_log 8 olympic/olympicfencing.com.au-ssl_log 5 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 487 45.148.10.12 391 203.54.180.238 269 185.177.72.11 101 103.104.164.114 57 103.104.165.99 36 40.115.94.245 9 150.228.151.47 9 1.144.107.82 8 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 8 182.239.240.254 6 180.181.236.49 4 118.127.40.55 2 40.77.167.149 2 213.87.244.48 2 207.46.13.17 --- top request paths across all vhosts (last 3 min) --- 145 POST /functions.php 75 GET /factory_session_checker.php 69 GET /app/ajax.php 65 GET /heartbeat.php 62 POST / 36 GET /factory_session_processed_qty.php 36 GET /factory_session_joiner.php 29 GET /api/getItem/LWPG2001KG 26 GET /index.php 24 GET / 21 POST /wp/ 21 POST /wordpress/ 21 POST /blog/ 19 POST /app/ajax/selectFilter.php 14 POST /wp/index.php 14 POST /wordpress/wp-json/batch/v1 14 POST /wordpress/index.php 14 POST /signin 14 POST /login 14 POST /index.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 145 POST /functions.php 69 GET /app/ajax.php 24 GET /index.php 19 POST /app/ajax/selectFilter.php 14 POST /clienteditsave.php 14 POST /app/ajax/selectFilterSingle.php 13 POST /app/ajax.php 11 POST /plugins/csvexporter/plugin.php 10 POST /quoteditsave.php 10 POST //functions.php 6 POST /itemModify.php 6 GET /plugins/fensa/fensa-ajax.php -- last 10 requests -- 180.181.236.49 - - [03/Sep/2026:12:24:01 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 233 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=1302" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [03/Sep/2026:12:24:02 +1000] "GET //index.php?page=jobregister HTTP/1.1" 200 15969 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=4251" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 182.239.240.254 - - [03/Sep/2026:12:24:03 +1000] "POST //jobeditsave.php?call=filter HTTP/1.1" 200 6840 "https://my.evolutionerp.com.au//index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 182.239.240.254 - - [03/Sep/2026:12:24:05 +1000] "GET //app/ajax.php?cn=&furi=true&uri=page%3Djobregister&call=getUserSetting&caller=ajaxSubmitLocal&seq=12410681451 HTTP/1.1" 200 93 "https://my.evolutionerp.com.au//index 103.104.164.114 - - [03/Sep/2026:12:24:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4873%2Findex.php%3Fpage%3Dinvoiceadd&invoiceid=48 182.239.240.254 - - [03/Sep/2026:12:24:06 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au//index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 103.104.165.99 - - [03/Sep/2026:12:24:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=staffedit&id=84" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 103.104.165.99 - - [03/Sep/2026:12:24:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 203.54.180.238 - - [03/Sep/2026:12:24:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/ 203.54.180.238 - - [03/Sep/2026:12:24:08 +1000] "GET / HTTP/1.1" 200 5354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" == alison/alisonarts.com.au-ssl_log == -- top paths -- 21 POST /wp/ 21 POST /wordpress/ 21 POST /blog/ 14 POST /wp/index.php 14 POST /wordpress/index.php 14 POST /blog/index.php 13 POST /auth/callback 12 POST /account 9 GET /wp/ 9 GET /wordpress/ 7 POST /wp/wp-json/Batch/v1 7 POST /wp/wp-json/batch/v1/ -- last 10 requests -- 45.148.10.12 - - [03/Sep/2026:12:23:56 +1000] "POST /blog//wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.alisonarts.com.au/blog/wp-admin/" "WordPress/6.4.3" 45.148.10.12 - - [03/Sep/2026:12:23:56 +1000] "POST /blog/wp-json/batch/v1/ HTTP/1.1" 401 53 "https://cpcontacts.alisonarts.com.au/blog/wp-admin/" "WordPress/6.4.3" 45.148.10.12 - - [03/Sep/2026:12:23:56 +1000] "POST /blog/blog/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.alisonarts.com.au/blog/wp-admin/" "WordPress/6.4.3" 45.148.10.12 - - [03/Sep/2026:12:23:57 +1000] "POST /blog/wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcontacts.alisonarts.com.au/blog/wp-admin/" "WordPress/6.4.3" 45.148.10.12 - - [03/Sep/2026:12:23:57 +1000] "GET /blog/wp/v2/posts/999999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [03/Sep/2026:12:23:57 +1000] "GET /blog/?rest_route=/wp/v2/posts/999999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537. 45.148.10.12 - - [03/Sep/2026:12:23:58 +1000] "GET /blog/wp/v2/pages HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [03/Sep/2026:12:23:58 +1000] "GET /blog/?rest_route=/wp/v2/pages HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [03/Sep/2026:12:23:58 +1000] "GET /blog/wp/v2/media HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [03/Sep/2026:12:23:58 +1000] "GET /blog/?rest_route=/wp/v2/media HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == evolution/support.evolutionerp.com.au == -- top paths -- 3 GET /app_dev.php/_profiler/open 1 GET /wp-login%2ephp 1 GET /wp-json/wc/v3/payment_gateways 1 GET /wp-json/wc/v2/payment_gateways 1 GET /wp-json/wc/v1/payment_gateways 1 GET /wp-json/gravitysmtp/v1/tests/mock-data 1 GET /wp-content/uploads/2025/.env 1 GET /wp-content/uploads/2024/.env 1 GET /wp-content/debug%2elog 1 GET /webmin/package-updates/update%2ecgi 1 GET /webhooks/incoming/stripe%2ejson 1 GET /webhook -- last 10 requests -- 185.177.72.11 - - [03/Sep/2026:12:23:58 +1000] "GET /%2egit/COMMIT_EDITMSG HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:23:59 +1000] "GET /%2egit/description HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:23:59 +1000] "GET /%2egit/FETCH_HEAD HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:23:59 +1000] "GET /%2egit/ORIG_HEAD HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:24:00 +1000] "GET /%2egithub HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:24:00 +1000] "GET /%2egithub/workflows HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:24:00 +1000] "GET /%2egithub/workflows/main.yml HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:24:00 +1000] "GET /%2egithub/workflows/ci.yml HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:24:01 +1000] "GET /%2egithub/dependabot.yml HTTP/1.1" 404 - "-" "curl/8.7.1" 185.177.72.11 - - [03/Sep/2026:12:24:01 +1000] "GET /%2egithub/CODEOWNERS HTTP/1.1" 404 - "-" "curl/8.7.1" --- last 30 samples (run-up to this incident) --- 2026-09-03 12:21:42 L1=1.55 run=6 blk=0 avail=7746 (56.2%) swpO=0 conn=5 myRSS=2803 php=17 phpRSS=1069 ap=50 tcp=59 topuser=evolution 2026-09-03 12:21:49 L1=1.50 run=5 blk=0 avail=7479 (54.3%) swpO=0 conn=7 myRSS=2804 php=20 phpRSS=1433 ap=51 tcp=55 topuser=evolution 2026-09-03 12:21:52 L1=1.46 run=3 blk=1 avail=7927 (57.5%) swpO=0 conn=5 myRSS=2804 php=15 phpRSS=820 ap=51 tcp=51 topuser=evolution 2026-09-03 12:21:59 L1=1.66 run=1 blk=0 avail=7881 (57.2%) swpO=0 conn=7 myRSS=2804 php=15 phpRSS=816 ap=58 tcp=56 topuser=evolution 2026-09-03 12:22:02 L1=1.61 run=4 blk=0 avail=7827 (56.8%) swpO=0 conn=5 myRSS=2804 php=16 phpRSS=909 ap=57 tcp=49 topuser=evolution 2026-09-03 12:22:09 L1=1.48 run=4 blk=0 avail=7886 (57.2%) swpO=0 conn=7 myRSS=2804 php=16 phpRSS=881 ap=52 tcp=50 topuser=evolution 2026-09-03 12:22:12 L1=1.60 run=8 blk=0 avail=7858 (57.0%) swpO=0 conn=5 myRSS=2804 php=16 phpRSS=831 ap=55 tcp=62 topuser=evolution 2026-09-03 12:22:19 L1=1.47 run=1 blk=0 avail=8066 (58.5%) swpO=0 conn=7 myRSS=2804 php=13 phpRSS=599 ap=57 tcp=50 topuser=evolution 2026-09-03 12:22:22 L1=1.60 run=3 blk=0 avail=8047 (58.4%) swpO=0 conn=5 myRSS=2804 php=15 phpRSS=721 ap=53 tcp=54 topuser=evolution 2026-09-03 12:22:29 L1=1.55 run=6 blk=0 avail=8122 (59.0%) swpO=0 conn=7 myRSS=2804 php=15 phpRSS=693 ap=47 tcp=49 topuser=evolution 2026-09-03 12:22:32 L1=1.50 run=4 blk=0 avail=8073 (58.6%) swpO=0 conn=5 myRSS=2804 php=16 phpRSS=689 ap=54 tcp=64 topuser=evolution 2026-09-03 12:22:39 L1=1.62 run=1 blk=0 avail=8143 (59.1%) swpO=0 conn=7 myRSS=2804 php=13 phpRSS=518 ap=58 tcp=47 topuser=evolution 2026-09-03 12:22:42 L1=1.57 run=4 blk=0 avail=8031 (58.3%) swpO=0 conn=4 myRSS=2804 php=19 phpRSS=813 ap=55 tcp=56 topuser=evolution 2026-09-03 12:22:49 L1=1.61 run=3 blk=0 avail=8167 (59.3%) swpO=0 conn=1 myRSS=2804 php=13 phpRSS=518 ap=54 tcp=49 topuser=evolution 2026-09-03 12:22:52 L1=1.48 run=1 blk=0 avail=8155 (59.2%) swpO=0 conn=4 myRSS=2804 php=15 phpRSS=599 ap=52 tcp=44 topuser=evolution 2026-09-03 12:22:59 L1=1.44 run=2 blk=0 avail=8205 (59.6%) swpO=0 conn=1 myRSS=2804 php=15 phpRSS=570 ap=47 tcp=43 topuser=evolution 2026-09-03 12:23:02 L1=1.33 run=4 blk=0 avail=8148 (59.1%) swpO=0 conn=4 myRSS=2804 php=17 phpRSS=695 ap=48 tcp=48 topuser=evolution 2026-09-03 12:23:09 L1=1.38 run=3 blk=0 avail=7956 (57.7%) swpO=0 conn=1 myRSS=2804 php=16 phpRSS=830 ap=54 tcp=37 topuser=evolution 2026-09-03 12:23:13 L1=1.43 run=3 blk=0 avail=8139 (59.1%) swpO=0 conn=4 myRSS=2804 php=16 phpRSS=664 ap=51 tcp=48 topuser=evolution 2026-09-03 12:23:19 L1=1.39 run=1 blk=0 avail=8030 (58.3%) swpO=0 conn=1 myRSS=2804 php=15 phpRSS=692 ap=57 tcp=46 topuser=evolution 2026-09-03 12:23:23 L1=1.28 run=3 blk=0 avail=8022 (58.2%) swpO=0 conn=4 myRSS=2804 php=16 phpRSS=732 ap=55 tcp=46 topuser=evolution 2026-09-03 12:23:29 L1=1.26 run=2 blk=0 avail=7935 (57.6%) swpO=0 conn=1 myRSS=2804 php=21 phpRSS=970 ap=55 tcp=52 topuser=evolution 2026-09-03 12:23:33 L1=1.24 run=1 blk=0 avail=8052 (58.4%) swpO=0 conn=4 myRSS=2804 php=16 phpRSS=732 ap=55 tcp=46 topuser=evolution 2026-09-03 12:23:39 L1=1.14 run=2 blk=0 avail=7799 (56.6%) swpO=0 conn=1 myRSS=2804 php=17 phpRSS=1001 ap=55 tcp=50 topuser=evolution 2026-09-03 12:23:43 L1=1.05 run=1 blk=0 avail=7776 (56.4%) swpO=0 conn=3 myRSS=2804 php=17 phpRSS=997 ap=59 tcp=50 topuser=evolution 2026-09-03 12:23:49 L1=1.12 run=6 blk=0 avail=7829 (56.8%) swpO=0 conn=2 myRSS=2804 php=19 phpRSS=980 ap=58 tcp=53 topuser=evolution 2026-09-03 12:23:53 L1=1.11 run=1 blk=0 avail=7888 (57.3%) swpO=0 conn=3 myRSS=2804 php=17 phpRSS=910 ap=56 tcp=44 topuser=evolution 2026-09-03 12:23:59 L1=1.03 run=1 blk=0 avail=7939 (57.6%) swpO=0 conn=2 myRSS=2804 php=16 phpRSS=868 ap=50 tcp=40 topuser=evolution 2026-09-03 12:24:03 L1=0.94 run=4 blk=0 avail=7924 (57.5%) swpO=0 conn=3 myRSS=2804 php=19 phpRSS=975 ap=48 tcp=48 topuser=evolution 2026-09-03 12:24:09 L1=0.95 run=1 blk=0 avail=7365 (53.5%) swpO=0 conn=1 myRSS=2804 php=21 phpRSS=1500 ap=52 tcp=52 topuser=madalice