INCIDENT 2026-08-15 11:11:40 trigger: php_rss=1871MB mysql_conn=18 ================================================================== load: 1.93 0.83 0.64 14/679 2696080 ncpu:10 mem_avail: 6702MB/11729MB (57.1%) swap_used:1294MB swapout:0/s blocked(D):0 running:9 iowait:0.0% steal:0.0% php: 17 procs / 1871MB heaviest user: otterfencing (16 procs, 1776MB) apache: 50 procs tcp_estab: 45 --- RSS by user (all processes) --- USER PROCS RSS_MB otterfencing 16 1830 mysql 1 1337 nobody 49 727 root 235 685 netdata 8 269 evolution 5 99 cpanellogin 1 52 kurri 4 47 mailman 20 27 dovenull 6 27 wp-toolkit 6 22 zabbix 1 17 aaa 1 12 dovecot 3 8 named 1 7 mailnull 2 7 nscd 1 6 dbus 1 3 cpanelconnecttrack 1 3 polkitd 1 2 --- php workers by user --- USER PROCS RSS_MB otterfencing 16 1846 evolution 1 96 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5542 MB Active(file): 3458 MB Inactive(file): 1547 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 323 MB CommitLimit: 9960 MB Committed_AS: 9780 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 10:00:25 236 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 1369452 2.7 Ssl 03:21:01 /usr/sbin/mariadbd 1220 1 netdata 215644 2.5 Ssl 47-01:01:43 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2390233 2382613 root 179068 0.0 S 08:36:03 spamd child 2696001 2695645 otterfencing 152032 64.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2390234 2382613 root 150068 0.0 S 08:36:03 spamd child 2696000 2695657 otterfencing 148384 62.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696002 2695722 otterfencing 141788 58.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696003 2695642 otterfencing 138220 57.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696004 2695721 otterfencing 134468 56.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696035 2693531 otterfencing 133632 116 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696034 2695644 otterfencing 133304 112 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696028 2695635 otterfencing 132876 57.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696029 2695285 otterfencing 132476 118 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696030 2695643 otterfencing 132068 112 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696037 2695710 otterfencing 121168 100 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696039 2692964 otterfencing 119236 96.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696041 2695730 otterfencing 117192 95.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696042 2693222 evolution 98756 0.0 S 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2696046 2695725 otterfencing 78992 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696048 2695715 otterfencing 78484 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2696050 2695717 otterfencing 77740 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2575382 1 root 76628 0.0 Ss 03:21:04 /usr/lib/systemd/systemd-journald 2674294 1353308 cpanellogin 53468 0.0 S 36:29 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1353308 1 root 42184 0.0 Ss 24-08:30:13 cpsrvd (SSL) - waiting for connections 1469 1 root 42140 0.1 Ss 47-01:01:42 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 40688 0.1 Sl 47-01:01:38 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2223 1201 root 40244 0.0 Sl 47-01:01:42 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2382613 1 root 23968 0.0 Ss 08:48:29 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2693464 1276780 nobody 21324 0.0 S 04:42 /usr/sbin/httpd -k start 2693222 1276780 nobody 19848 0.0 S 05:14 /usr/sbin/httpd -k start 2693522 1276780 nobody 19404 0.1 S 04:38 /usr/sbin/httpd -k start 2692964 1276780 nobody 18552 0.0 S 05:42 /usr/sbin/httpd -k start 2693531 1276780 nobody 18348 0.0 S 04:36 /usr/sbin/httpd -k start 2693540 1276780 nobody 18296 0.0 S 04:35 /usr/sbin/httpd -k start 2693553 1276780 nobody 18092 0.0 S 04:34 /usr/sbin/httpd -k start 2695730 1276780 nobody 17908 0.0 S 00:31 /usr/sbin/httpd -k start 2695664 1276780 nobody 17848 0.1 S 00:32 /usr/sbin/httpd -k start 1204 1 zabbix 17776 0.2 Ssl 47-01:01:43 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2694762 1276780 nobody 17452 0.0 S 02:19 /usr/sbin/httpd -k start 2695671 1276780 nobody 17336 0.0 S 00:32 /usr/sbin/httpd -k start 185104 2431 netdata 17032 2.0 Sl 2-14:38:01 /usr/libexec/netdata/plugins.d/apps.plugin 1 2695661 1276780 nobody 16948 0.0 S 00:33 /usr/sbin/httpd -k start 2695285 1276780 nobody 16840 0.0 S 01:27 /usr/sbin/httpd -k start 2695710 1276780 nobody 16836 0.0 S 00:31 /usr/sbin/httpd -k start 2695712 1276780 nobody 16304 0.0 S 00:31 /usr/sbin/httpd -k start 2695668 1276780 nobody 16300 0.0 S 00:32 /usr/sbin/httpd -k start 2695708 1276780 nobody 16248 0.0 S 00:31 /usr/sbin/httpd -k start 2695289 1276780 nobody 16076 0.0 S 01:26 /usr/sbin/httpd -k start 2695732 1276780 nobody 15756 0.0 S 00:31 /usr/sbin/httpd -k start 2695738 1276780 nobody 15696 0.0 S 00:31 /usr/sbin/httpd -k start 2695709 1276780 nobody 15664 0.0 S 00:31 /usr/sbin/httpd -k start 2695674 1276780 nobody 15552 0.0 S 00:32 /usr/sbin/httpd -k start 2695715 1276780 nobody 15492 0.0 S 00:31 /usr/sbin/httpd -k start 2695657 1276780 nobody 15452 0.0 S 00:33 /usr/sbin/httpd -k start 2695727 1276780 nobody 15452 0.0 S 00:31 /usr/sbin/httpd -k start 2695725 1276780 nobody 15432 0.0 S 00:31 /usr/sbin/httpd -k start 2695644 1276780 nobody 15404 0.0 S 00:34 /usr/sbin/httpd -k start 2695676 1276780 nobody 15400 0.0 S 00:32 /usr/sbin/httpd -k start 2695734 1276780 nobody 15336 0.0 S 00:31 /usr/sbin/httpd -k start 2695720 1276780 nobody 15308 0.0 S 00:31 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +-------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 40711 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min otterfencing/otterfencing.com.au-ssl_log 116 evolution/my.evolutionerp.com.au-ssl_log 82 customc/customcentral.com.au-ssl_log 64 madalice/madalice.com.au-ssl_log 51 evolution/portal.evolutionerp.com.au-ssl_log 22 aaa/aaadownunder.com.au-ssl_log 7 corpkicks/corporatekicks.com.au-ssl_log 3 alison/alisonarts.com.au-ssl_log 2 evolution/evolutionerp.com.au-ssl_log 2 kamcool/kamcool.com.au-ssl_log 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 116 34.139.138.115 73 115.70.61.91 63 52.139.47.57 29 4.223.164.152 22 203.54.180.238 19 4.223.113.180 5 118.127.40.55 3 65.55.210.233 2 91.92.243.249 2 65.55.210.72 2 52.167.144.25 2 40.77.177.202 1 52.167.144.161 1 51.161.37.194 1 40.77.167.72 --- top request paths across all vhosts (last 3 min) --- 30 GET /app/ajax.php 22 GET /heartbeat.php 13 POST /functions.php 12 GET /index.php 11 POST /quoteditsave.php 5 POST /wp-cron.php 5 POST / 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax.php 4 GET / 3 POST /wp-login.php 3 POST /app/ajax/selectFilter.php 2 POST /clienteditsave.php 2 GET /wp-signup.php 2 GET /robots.txt 2 GET /fpwch.php 2 GET /classwithtostring.php 2 GET /buy.php 2 GET /admin.php 2 GET /222.php --- busiest 3 vhosts: top paths + last 10 requests --- == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 5 POST / 2 GET / 1 GET /wp-config.php 1 GET /web/.env 1 GET /.ssh/id_rsa 1 GET /.ssh/id_ed25519 1 GET /.ssh/id_ecdsa 1 GET /.ssh/id_dsa 1 GET /.ssh/config 1 GET /src/.env 1 GET /server.key 1 GET /server/.env -- last 10 requests -- 34.139.138.115 - - [15/Aug/2026:11:11:38 +1000] "GET /key.pem HTTP/1.1" 404 56604 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.139.138.115 - - [15/Aug/2026:11:11:38 +1000] "GET /id_dsa HTTP/1.1" 404 56602 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.139.138.115 - - [15/Aug/2026:11:11:39 +1000] "GET /private-key HTTP/1.1" 404 56612 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 118.127.40.55 - - [15/Aug/2026:11:11:39 +1000] "POST /?wordfence_syncAttackData=1786756299.9789 HTTP/1.1" 200 22307 "-" "WordPress/6.8.2; https://wp.otterfencing.com.au" 34.139.138.115 - - [15/Aug/2026:11:11:38 +1000] "GET /privatekey.key HTTP/1.1" 404 56618 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 118.127.40.55 - - [15/Aug/2026:11:11:39 +1000] "POST /?wordfence_syncAttackData=1786756299.969 HTTP/1.1" 200 1 "-" "WordPress/6.8.2; https://wp.otterfencing.com.au" 34.139.138.115 - - [15/Aug/2026:11:11:38 +1000] "GET /server.key HTTP/1.1" 404 56610 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 118.127.40.55 - - [15/Aug/2026:11:11:40 +1000] "POST /?wordfence_syncAttackData=1786756300.1757 HTTP/1.1" 200 22306 "-" "WordPress/6.8.2; https://wp.otterfencing.com.au" 118.127.40.55 - - [15/Aug/2026:11:11:40 +1000] "POST /?wordfence_syncAttackData=1786756300.1023 HTTP/1.1" 200 22306 "-" "WordPress/6.8.2; https://wp.otterfencing.com.au" 118.127.40.55 - - [15/Aug/2026:11:11:40 +1000] "POST /?wordfence_syncAttackData=1786756300.0371 HTTP/1.1" 200 22306 "-" "WordPress/6.8.2; https://wp.otterfencing.com.au" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 30 GET /app/ajax.php 13 POST /functions.php 12 GET /index.php 11 POST /quoteditsave.php 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax.php 3 POST /app/ajax/selectFilter.php 2 POST /clienteditsave.php 1 POST /logsave.php 1 POST /jobaddsave.php 1 POST /activitiessave.php -- last 10 requests -- 115.70.61.91 - - [15/Aug/2026:11:11:32 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 12949 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4663§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Wi 115.70.61.91 - - [15/Aug/2026:11:11:33 +1000] "POST /quoteditsave.php?call=getQuoteStarters HTTP/1.1" 200 22 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4663§ionid=0" "Mozilla/5.0 (Windows NT 10.0 115.70.61.91 - - [15/Aug/2026:11:11:33 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4663§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 115.70.61.91 - - [15/Aug/2026:11:11:35 +1000] "POST /quoteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4663§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 115.70.61.91 - - [15/Aug/2026:11:11:35 +1000] "GET /index.php?page=quotedit"eid=4663§ionid=0 HTTP/1.1" 200 66966 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4663§ionid=0" "Mozilla/5.0 (Win 115.70.61.91 - - [15/Aug/2026:11:11:36 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=12519313709 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index.p 115.70.61.91 - - [15/Aug/2026:11:11:36 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18262164486 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/index. 115.70.61.91 - - [15/Aug/2026:11:11:36 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dquotedit%26quoteid%3D4663%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=10877685557 HTTP/1.1" 2 115.70.61.91 - - [15/Aug/2026:11:11:37 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D4663%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=14337736519 HTTP/1.1" 200 170 "https://my 115.70.61.91 - - [15/Aug/2026:11:11:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=4663§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; == customc/customcentral.com.au-ssl_log == -- top paths -- 2 POST /wp-cron.php 1 GET /x.php 1 GET /xmlrpc.php 1 GET /xda.php 1 GET /wpxml.php 1 GET /wp-themes.php 1 GET /wp-signup.php 1 GET /wp-mail.php 1 GET /wp-includes/style-engine/ 1 GET /wp-includes/rest-api/endpoints/ 1 GET /wp-includes/rest-api/ 1 GET /wp-includes/fonts/index.php -- last 10 requests -- 52.139.47.57 - - [15/Aug/2026:11:10:16 +1000] "GET /wp-includes/rest-api/ HTTP/1.1" 404 15041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:17 +1000] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 404 15045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 52.139.47.57 - - [15/Aug/2026:11:10:19 +1000] "GET /wp-includes/style-engine/ HTTP/1.1" 404 15038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:20 +1000] "GET /wp-mail.php HTTP/1.1" 403 876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:21 +1000] "GET /wp-signup.php HTTP/1.1" 302 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:22 +1000] "GET /wp-themes.php HTTP/1.1" 404 15040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:23 +1000] "GET /wpxml.php HTTP/1.1" 404 15041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:24 +1000] "GET /x.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:24 +1000] "GET /xda.php HTTP/1.1" 404 15041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.139.47.57 - - [15/Aug/2026:11:10:25 +1000] "GET /xmlrpc.php HTTP/1.1" 404 15035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-15 11:09:18 L1=0.50 run=1 blk=0 avail=8247 (70.3%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=17 tcp=27 topuser=- 2026-08-15 11:09:20 L1=0.50 run=1 blk=0 avail=8236 (70.2%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=17 tcp=28 topuser=- 2026-08-15 11:09:28 L1=0.50 run=2 blk=0 avail=8220 (70.1%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=20 tcp=27 topuser=- 2026-08-15 11:09:30 L1=0.50 run=2 blk=0 avail=8131 (69.3%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=131 ap=20 tcp=26 topuser=customc 2026-08-15 11:09:38 L1=0.65 run=2 blk=0 avail=8241 (70.3%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=19 tcp=23 topuser=- 2026-08-15 11:09:40 L1=0.65 run=2 blk=0 avail=8211 (70.0%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=69 ap=18 tcp=21 topuser=customc 2026-08-15 11:09:48 L1=0.62 run=1 blk=0 avail=8260 (70.4%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=17 tcp=20 topuser=- 2026-08-15 11:09:50 L1=0.62 run=3 blk=0 avail=8166 (69.6%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=123 ap=17 tcp=19 topuser=customc 2026-08-15 11:09:58 L1=0.53 run=2 blk=0 avail=8206 (70.0%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=84 ap=17 tcp=22 topuser=customc 2026-08-15 11:10:00 L1=0.53 run=3 blk=0 avail=8108 (69.1%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=182 ap=17 tcp=18 topuser=customc 2026-08-15 11:10:08 L1=0.53 run=3 blk=0 avail=8188 (69.8%) swpO=0 conn=2 myRSS=1336 php=2 phpRSS=137 ap=17 tcp=18 topuser=customc 2026-08-15 11:10:10 L1=0.53 run=2 blk=0 avail=8260 (70.4%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-15 11:10:18 L1=0.83 run=2 blk=0 avail=8085 (68.9%) swpO=0 conn=2 myRSS=1336 php=1 phpRSS=183 ap=20 tcp=23 topuser=customc 2026-08-15 11:10:20 L1=0.83 run=2 blk=0 avail=8214 (70.0%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=50 ap=20 tcp=23 topuser=customc 2026-08-15 11:10:28 L1=0.77 run=3 blk=0 avail=8215 (70.0%) swpO=0 conn=2 myRSS=1336 php=1 phpRSS=94 ap=20 tcp=24 topuser=alison 2026-08-15 11:10:30 L1=0.77 run=2 blk=0 avail=8244 (70.3%) swpO=0 conn=1 myRSS=1336 php=1 phpRSS=64 ap=20 tcp=20 topuser=alison 2026-08-15 11:10:38 L1=0.81 run=1 blk=0 avail=8292 (70.7%) swpO=0 conn=2 myRSS=1336 php=0 phpRSS=0 ap=19 tcp=23 topuser=- 2026-08-15 11:10:40 L1=0.81 run=1 blk=0 avail=8292 (70.7%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=19 tcp=20 topuser=- 2026-08-15 11:10:48 L1=0.69 run=1 blk=0 avail=8302 (70.8%) swpO=0 conn=2 myRSS=1336 php=0 phpRSS=0 ap=18 tcp=16 topuser=- 2026-08-15 11:10:50 L1=0.69 run=2 blk=0 avail=8302 (70.8%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=17 tcp=15 topuser=- 2026-08-15 11:10:58 L1=0.58 run=2 blk=0 avail=8303 (70.8%) swpO=0 conn=2 myRSS=1336 php=0 phpRSS=0 ap=16 tcp=20 topuser=- 2026-08-15 11:11:00 L1=0.58 run=1 blk=0 avail=8311 (70.9%) swpO=0 conn=1 myRSS=1336 php=0 phpRSS=0 ap=16 tcp=20 topuser=- 2026-08-15 11:11:08 L1=0.65 run=11 blk=0 avail=7208 (61.5%) swpO=0 conn=6 myRSS=1336 php=6 phpRSS=750 ap=48 tcp=47 topuser=otterfencing 2026-08-15 11:11:10 L1=0.65 run=14 blk=0 avail=7215 (61.5%) swpO=0 conn=1 myRSS=1336 php=10 phpRSS=984 ap=80 tcp=76 topuser=otterfencing 2026-08-15 11:11:19 L1=0.92 run=5 blk=0 avail=7454 (63.6%) swpO=0 conn=6 myRSS=1336 php=4 phpRSS=613 ap=72 tcp=35 topuser=otterfencing 2026-08-15 11:11:20 L1=0.92 run=10 blk=0 avail=7223 (61.6%) swpO=0 conn=1 myRSS=1337 php=8 phpRSS=979 ap=71 tcp=26 topuser=otterfencing 2026-08-15 11:11:29 L1=1.46 run=9 blk=0 avail=7032 (60.0%) swpO=0 conn=6 myRSS=1337 php=8 phpRSS=1097 ap=62 tcp=35 topuser=otterfencing 2026-08-15 11:11:30 L1=1.46 run=11 blk=0 avail=7271 (62.0%) swpO=0 conn=1 myRSS=1337 php=9 phpRSS=1004 ap=61 tcp=35 topuser=otterfencing 2026-08-15 11:11:39 L1=1.93 run=7 blk=0 avail=7887 (67.2%) swpO=0 conn=6 myRSS=1337 php=5 phpRSS=331 ap=52 tcp=29 topuser=otterfencing 2026-08-15 11:11:40 L1=1.93 run=9 blk=0 avail=6702 (57.1%) swpO=0 conn=18 myRSS=1337 php=17 phpRSS=1871 ap=50 tcp=45 topuser=otterfencing