INCIDENT 2026-09-02 12:51:18 trigger: php_procs=53 php_rss=4091MB mysql_conn=37 ================================================================== load: 7.27 2.77 1.93 59/718 2936861 ncpu:10 mem_avail: 4909MB/13777MB (35.6%) swap_used:2365MB swapout:1532/s blocked(D):0 running:57 iowait:0.1% steal:0.0% php: 53 procs / 4091MB heaviest user: otterfencing (45 procs, 3689MB) apache: 67 procs tcp_estab: 207 --- RSS by user (all processes) --- USER PROCS RSS_MB otterfencing 45 3863 mysql 1 3534 nobody 68 1217 root 241 816 mailman 20 285 evolution 12 273 netdata 7 203 madalice 1 156 dovenull 6 68 wp-toolkit 3 57 aaa 2 55 cpanellogin 1 51 dovecot 3 28 mailnull 3 24 zabbix 1 18 lowrange 1 14 kurri 1 13 named 1 11 nscd 1 4 polkitd 1 3 --- php workers by user --- USER PROCS RSS_MB otterfencing 45 3890 evolution 6 219 madalice 1 156 aaa 1 40 root 1 25 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5591 MB Active(file): 3395 MB Inactive(file): 958 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 444 MB CommitLimit: 10984 MB Committed_AS: 15325 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-10:28:51 5788 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3610232 11.1 Ssl 5-10:32:11 /usr/sbin/mariadbd 508924 1 netdata 183568 2.0 Ssl 5-10:31:40 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2936732 2920990 otterfencing 163064 24.8 R 00:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936740 2936361 otterfencing 161944 27.6 R 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936452 3929444 madalice 160712 12.9 S 00:19 php-fpm: pool madalice_com_au 2936765 2920989 otterfencing 155152 36.0 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936748 2936597 otterfencing 150028 27.1 R 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 706071 655564 root 149520 0.0 S 10:13:21 spamd child 2936743 2920260 otterfencing 139096 21.8 R 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936768 2920991 otterfencing 131608 32.0 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936767 2920938 otterfencing 121984 27.2 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936764 2921017 otterfencing 114324 28.2 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936762 2918236 otterfencing 113180 24.0 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936781 2936316 otterfencing 112696 33.0 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936771 2936556 otterfencing 111572 25.2 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 655564 1 root 110160 0.0 Ss 10:27:57 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2936752 2936019 otterfencing 109832 18.6 R 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936772 2936744 otterfencing 106964 21.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936779 2919951 otterfencing 105352 28.0 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936763 2920964 otterfencing 105288 20.5 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2900038 655564 root 104908 0.0 S 09:17 spamd child 2936761 2936360 otterfencing 104840 16.6 R 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936782 2936570 otterfencing 100616 24.3 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936783 2936596 otterfencing 100240 25.0 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936775 2921022 otterfencing 95780 17.0 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936773 2920216 otterfencing 90096 16.7 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936800 2936758 otterfencing 89032 31.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936791 2936746 otterfencing 88996 29.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936777 2920923 otterfencing 87188 15.0 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936784 2936555 otterfencing 86228 20.0 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936780 2936362 otterfencing 84624 17.3 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936805 2920988 otterfencing 75704 22.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936790 2936747 otterfencing 74920 20.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936794 2936756 otterfencing 73752 18.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936802 2936017 otterfencing 73480 18.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936796 2936755 otterfencing 73080 23.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936798 2936757 otterfencing 72732 22.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936803 2936745 otterfencing 71264 17.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936789 2902232 otterfencing 70644 15.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936807 2936806 otterfencing 70448 30.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936770 2921025 evolution 68612 5.2 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936749 2920346 evolution 68108 3.3 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936786 2920994 otterfencing 67340 15.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936801 2920987 otterfencing 64292 11.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936793 2936754 otterfencing 61200 9.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936799 2936760 otterfencing 61188 9.5 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936811 2918921 otterfencing 61104 18.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936792 2936599 otterfencing 61056 9.5 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936797 2936759 otterfencing 60936 9.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936832 2936601 otterfencing 60820 10.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936810 2936315 otterfencing 58016 14.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936813 2936736 otterfencing 54928 11.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2724455 1353308 cpanellogin 52460 0.0 S 52:41 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2936831 2936735 aaa 47316 8.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 43864 0.0 Sl 5-10:31:37 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 42124 0.1 Ss 65-02:41:32 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41968 0.1 Ss 42-10:10:03 cpsrvd (SSL) - waiting for connections 2936845 2936724 otterfencing 40472 4.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936795 2919864 evolution 39792 1.5 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2936881 2936854 evolution 39728 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+----------------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+----------------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 18307468 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 18307465 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 18307443 | root | 108-1481181613 | Execute | 0 | Creating sort index | select uploads.* from uploads,quoteitems where uploads.sourceid=quoteitems.id AND uploads.subtype='quoteitem' and quoteitems.quoteid = ? order by name | +----------+----------------------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 498 evolution/portal.evolutionerp.com.au-ssl_log 362 otterfencing/otterfencing.com.au-ssl_log 135 evolution/app.evolutionerp.com.au-ssl_log 114 aaa/aaadownunder.com.au-ssl_log 95 aaa/aaadownunder.com.au 43 madalice/madalice.com.au-ssl_log 6 alison/alisonarts.com.au-ssl_log 2 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 520 203.54.180.238 216 20.104.49.130 114 40.115.94.245 81 182.239.240.254 69 180.181.236.49 52 150.228.151.47 35 101.182.108.127 34 34.128.110.76 30 103.104.164.114 29 103.104.165.99 29 101.166.96.210 18 147.161.213.78 11 1.144.107.82 5 120.150.225.142 4 216.73.216.109 --- top request paths across all vhosts (last 3 min) --- 185 POST /functions.php 168 GET /factory_session_checker.php 96 GET /app/ajax.php 85 GET /factory_session_processed_qty.php 85 GET /factory_session_joiner.php 52 GET /index.php 36 GET /api/getItem/LWFB2001KG 27 GET /heartbeat.php 25 POST /quoteditsave.php 25 POST /app/ajax.php 23 POST /app/ajax/selectFilter.php 21 POST /plugins/csvexporter/plugin.php 21 GET /api/getItem/LWPG2001KG 14 POST /itemModify.php 12 POST /app/ajax/selectFilterSingle.php 11 POST /assetsave.php 7 POST /jobeditsave.php 6 POST /inveditsave.php 6 POST /clienteditsave.php 6 GET / --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 185 POST /functions.php 96 GET /app/ajax.php 43 GET /index.php 25 POST /quoteditsave.php 25 POST /app/ajax.php 23 POST /app/ajax/selectFilter.php 21 POST /plugins/csvexporter/plugin.php 14 POST /itemModify.php 12 POST /app/ajax/selectFilterSingle.php 11 POST /assetsave.php 7 POST /jobeditsave.php 6 POST /inveditsave.php -- last 10 requests -- 182.239.240.254 - - [02/Sep/2026:12:51:09 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobregister&call=getUserSetting&caller=ajaxSubmitLocal&seq=13110032886 HTTP/1.1" 200 93 "https://my.evolutionerp.com.au/index.p 203.54.180.238 - - [02/Sep/2026:12:51:09 +1000] "POST /quoteditsave.php?call=searchFilterClients&filter=PETER%20MA HTTP/1.1" 200 185 "https://my.evolutionerp.com.au/index.php?page=quotedit" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [02/Sep/2026:12:51:10 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29336&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [02/Sep/2026:12:51:10 +1000] "POST /quoteditsave.php?call=searchFilterClients&filter=PETER%20MAY HTTP/1.1" 200 111 "https://my.evolutionerp.com.au/index.php?page=quotedit" "Mozilla/5.0 (Windows NT 10.0 182.239.240.254 - - [02/Sep/2026:12:51:10 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 103.104.164.114 - - [02/Sep/2026:12:51:11 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [02/Sep/2026:12:51:11 +1000] "POST /quoteditsave.php?clientid=17115&call=getClient HTTP/1.1" 200 712 "https://my.evolutionerp.com.au/index.php?page=quotedit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [02/Sep/2026:12:51:11 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 3405 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 182.239.240.254 - - [02/Sep/2026:12:51:11 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 768 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:51:11 +1000] "POST /quoteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 168 GET /factory_session_checker.php 85 GET /factory_session_processed_qty.php 85 GET /factory_session_joiner.php 27 GET /heartbeat.php 9 GET /index.php 2 POST /portal/register -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:12:51:19 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:12:51:20 +1000] "GET /factory_session_joiner.php?id=35036 HTTP/1.1" 200 92 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:12:51:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:51:21 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:12:51:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:51:21 +1000] "GET /factory_session_joiner.php?id=35054 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:12:51:22 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:51:23 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:12:51:23 +1000] "GET /factory_session_joiner.php?id=35055 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:12:51:20 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 1 GET /zoo2.php 1 GET /yawa.php 1 GET /xwx1.php 1 GET /xwpg.php 1 GET /xmini4.php 1 GET /xa.php 1 GET /x1da.php 1 GET /wsd.php 1 GET /ws85.php 1 GET /ws78.php 1 GET /ws58.php 1 GET /ws45.php -- last 10 requests -- 34.128.110.76 - - [02/Sep/2026:12:51:12 +1000] "GET /api/config.php HTTP/1.1" 404 56620 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:12 +1000] "GET /actuator/trace HTTP/1.1" 404 56620 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:13 +1000] "GET /actuator/httptrace HTTP/1.1" 404 56628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:12 +1000] "GET /api/phpinfo.php.bak HTTP/1.1" 404 56630 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:15 +1000] "GET /alertmanager.yml HTTP/1.1" 404 56622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:14 +1000] "GET /actuator/configprops HTTP/1.1" 404 56632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:15 +1000] "GET /api/docker-compose.prod.yml HTTP/1.1" 404 56646 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:15 +1000] "GET /actuator/heapdump HTTP/1.1" 404 56626 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:15 +1000] "GET /admin/kubeconfig HTTP/1.1" 404 56624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.128.110.76 - - [02/Sep/2026:12:51:16 +1000] "GET /api/configprops HTTP/1.1" 404 56622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-02 12:48:58 L1=2.37 run=1 blk=0 avail=7255 (52.7%) swpO=0 conn=1 myRSS=3559 php=4 phpRSS=349 ap=58 tcp=71 topuser=madalice 2026-09-02 12:48:58 L1=2.37 run=1 blk=0 avail=7254 (52.7%) swpO=0 conn=1 myRSS=3559 php=4 phpRSS=349 ap=58 tcp=71 topuser=madalice 2026-09-02 12:49:08 L1=2.69 run=4 blk=0 avail=7266 (52.7%) swpO=0 conn=1 myRSS=3559 php=5 phpRSS=391 ap=55 tcp=53 topuser=madalice 2026-09-02 12:49:08 L1=2.69 run=1 blk=0 avail=7279 (52.8%) swpO=0 conn=1 myRSS=3559 php=4 phpRSS=348 ap=55 tcp=54 topuser=madalice 2026-09-02 12:49:18 L1=2.43 run=2 blk=0 avail=7311 (53.1%) swpO=0 conn=1 myRSS=3559 php=5 phpRSS=414 ap=46 tcp=45 topuser=madalice 2026-09-02 12:49:18 L1=2.43 run=2 blk=0 avail=7347 (53.3%) swpO=0 conn=1 myRSS=3559 php=4 phpRSS=348 ap=46 tcp=47 topuser=madalice 2026-09-02 12:49:28 L1=2.14 run=2 blk=0 avail=7387 (53.6%) swpO=0 conn=1 myRSS=3559 php=4 phpRSS=349 ap=38 tcp=49 topuser=madalice 2026-09-02 12:49:28 L1=2.14 run=5 blk=0 avail=7357 (53.4%) swpO=0 conn=1 myRSS=3559 php=6 phpRSS=455 ap=38 tcp=49 topuser=madalice 2026-09-02 12:49:38 L1=2.04 run=7 blk=0 avail=7238 (52.5%) swpO=0 conn=1 myRSS=3559 php=4 phpRSS=255 ap=69 tcp=76 topuser=madalice 2026-09-02 12:49:38 L1=2.04 run=1 blk=0 avail=7314 (53.1%) swpO=0 conn=1 myRSS=3559 php=3 phpRSS=190 ap=69 tcp=73 topuser=madalice 2026-09-02 12:49:48 L1=2.18 run=1 blk=0 avail=7337 (53.3%) swpO=0 conn=1 myRSS=3573 php=4 phpRSS=234 ap=62 tcp=61 topuser=madalice 2026-09-02 12:49:48 L1=2.18 run=2 blk=0 avail=7303 (53.0%) swpO=0 conn=1 myRSS=3573 php=5 phpRSS=303 ap=62 tcp=62 topuser=madalice 2026-09-02 12:49:58 L1=1.92 run=1 blk=0 avail=7428 (53.9%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=189 ap=52 tcp=55 topuser=madalice 2026-09-02 12:49:58 L1=1.92 run=1 blk=0 avail=7428 (53.9%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=189 ap=52 tcp=53 topuser=madalice 2026-09-02 12:50:08 L1=2.01 run=3 blk=0 avail=7374 (53.5%) swpO=0 conn=1 myRSS=3573 php=4 phpRSS=277 ap=50 tcp=50 topuser=madalice 2026-09-02 12:50:08 L1=2.01 run=2 blk=0 avail=7431 (53.9%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=189 ap=50 tcp=51 topuser=madalice 2026-09-02 12:50:18 L1=1.86 run=2 blk=0 avail=7492 (54.4%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=156 ap=45 tcp=49 topuser=infinium 2026-09-02 12:50:18 L1=1.86 run=2 blk=0 avail=7494 (54.4%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=156 ap=45 tcp=49 topuser=infinium 2026-09-02 12:50:28 L1=1.65 run=1 blk=1 avail=7499 (54.4%) swpO=0 conn=1 myRSS=3573 php=4 phpRSS=185 ap=42 tcp=48 topuser=madalice 2026-09-02 12:50:28 L1=1.65 run=1 blk=0 avail=7500 (54.4%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=171 ap=42 tcp=46 topuser=madalice 2026-09-02 12:50:38 L1=1.56 run=2 blk=0 avail=7461 (54.2%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=257 ap=36 tcp=46 topuser=madalice 2026-09-02 12:50:38 L1=1.56 run=3 blk=0 avail=7430 (53.9%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=285 ap=36 tcp=46 topuser=madalice 2026-09-02 12:50:48 L1=1.32 run=3 blk=0 avail=7503 (54.5%) swpO=0 conn=1 myRSS=3573 php=4 phpRSS=234 ap=40 tcp=47 topuser=madalice 2026-09-02 12:50:48 L1=1.32 run=1 blk=0 avail=7508 (54.5%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=192 ap=40 tcp=47 topuser=madalice 2026-09-02 12:50:58 L1=1.11 run=4 blk=0 avail=7206 (52.3%) swpO=0 conn=1 myRSS=3573 php=6 phpRSS=576 ap=38 tcp=57 topuser=corpkicks 2026-09-02 12:50:58 L1=1.11 run=3 blk=0 avail=7200 (52.3%) swpO=0 conn=3 myRSS=3573 php=5 phpRSS=557 ap=38 tcp=55 topuser=corpkicks 2026-09-02 12:51:08 L1=1.17 run=1 blk=0 avail=7399 (53.7%) swpO=0 conn=1 myRSS=3573 php=3 phpRSS=167 ap=57 tcp=65 topuser=madalice 2026-09-02 12:51:09 L1=1.17 run=2 blk=0 avail=7394 (53.7%) swpO=0 conn=3 myRSS=3573 php=4 phpRSS=203 ap=57 tcp=65 topuser=madalice 2026-09-02 12:51:18 L1=7.27 run=57 blk=0 avail=4909 (35.6%) swpO=1532 conn=37 myRSS=3536 php=53 phpRSS=4091 ap=67 tcp=207 topuser=otterfencing 2026-09-02 12:51:19 L1=7.27 run=54 blk=0 avail=4689 (34.0%) swpO=1718 conn=40 myRSS=3534 php=54 phpRSS=4353 ap=69 tcp=215 topuser=otterfencing