INCIDENT 2026-09-02 13:27:18 trigger: mem_avail=7.5% load=102.09/10cpu swapout=13654/s php_procs=126 php_rss=13091MB mysql_conn=99 ================================================================== load: 105.13 33.46 13.07 131/931 3068299 ncpu:10 mem_avail: 1032MB/13777MB (7.5%) swap_used:2465MB swapout:13654/s blocked(D):3 running:128 iowait:8.1% steal:0.0% php: 126 procs / 13091MB heaviest user: otterfencing (112 procs, 12631MB) apache: 175 procs tcp_estab: 416 --- RSS by user (all processes) --- USER PROCS RSS_MB otterfencing 110 12431 nobody 172 1740 mysql 1 538 evolution 18 498 root 245 392 netdata 7 154 mailman 20 43 kurri 2 14 zabbix 1 13 dovenull 6 13 cpanellogin 1 12 mailnull 2 9 madalice 1 9 wp-toolkit 3 8 aaa 5 8 dovecot 3 7 cpanelphpmyadmin 1 7 polkitd 1 2 dbus 1 2 cpanelconnecttrack 1 2 --- php workers by user --- USER PROCS RSS_MB otterfencing 111 12389 evolution 11 465 madalice 1 9 root 1 3 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6332 MB Active(file): 194 MB Inactive(file): 226 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 195 MB CommitLimit: 10984 MB Committed_AS: 28538 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-11:04:51 1252 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3067388 1 mysql 555900 15.3 Rsl 00:32 /usr/sbin/mariadbd 3067477 3066441 otterfencing 177984 6.9 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067604 3066257 otterfencing 177708 7.5 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067610 3051682 otterfencing 177032 7.0 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067520 3066654 otterfencing 176932 6.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067611 3066612 otterfencing 176572 7.9 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067489 3067479 otterfencing 176284 6.7 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067639 3051813 otterfencing 176008 7.3 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067646 3051817 otterfencing 174708 7.6 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067620 3066807 otterfencing 171620 6.9 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067495 3066829 otterfencing 169192 7.7 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067933 3049467 otterfencing 167768 10.8 S 00:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067503 3051099 otterfencing 165900 6.5 S 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067494 3066717 otterfencing 165800 7.5 S 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067663 3051680 otterfencing 165188 6.3 R 00:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067484 3067248 otterfencing 164096 7.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067572 3066806 otterfencing 163960 6.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067575 3066808 otterfencing 163816 7.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067580 3066656 otterfencing 162852 6.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067492 3067480 otterfencing 161028 6.2 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067658 3066538 otterfencing 159872 6.8 R 00:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067645 3051677 otterfencing 158912 5.7 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067510 3066800 otterfencing 156896 5.2 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067508 3066825 otterfencing 156856 6.7 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067511 3066556 otterfencing 155328 5.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067613 3066475 otterfencing 153928 5.4 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067502 3066477 otterfencing 153628 8.8 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067661 3051647 otterfencing 152856 7.5 R 00:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067603 3048349 otterfencing 152780 6.7 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067659 3066562 otterfencing 152268 7.3 R 00:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067622 3066652 otterfencing 151960 5.8 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067607 3066703 otterfencing 149788 6.1 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067636 3048964 otterfencing 149692 5.7 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067509 3066657 otterfencing 148120 7.2 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067929 3067032 otterfencing 147536 7.9 R 00:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067563 3066655 otterfencing 144616 6.2 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067488 3067478 otterfencing 144156 5.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067505 3066564 otterfencing 143840 5.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067623 3066552 otterfencing 143840 5.9 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067500 3067247 otterfencing 143136 6.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067581 3066704 otterfencing 141788 5.1 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067501 3066712 otterfencing 140420 5.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067519 3067391 otterfencing 139576 5.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067513 3066821 otterfencing 139320 5.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 508924 1 netdata 137736 2.0 Ssl 5-11:07:40 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3068116 3050201 otterfencing 135772 14.6 R 00:12 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067515 3067389 otterfencing 130784 5.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067507 3049586 otterfencing 130004 4.9 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067582 3066818 otterfencing 128948 5.0 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067642 3051804 otterfencing 128048 4.0 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3066946 3066828 otterfencing 124884 4.0 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3066768 3066550 otterfencing 123436 3.8 D 01:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3066937 3066813 otterfencing 122880 4.9 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067506 3066711 otterfencing 122744 5.3 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067564 3066843 otterfencing 122472 4.6 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3066662 3066658 otterfencing 120876 4.2 R 01:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3066791 3066705 otterfencing 120604 4.8 R 01:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067608 3066542 otterfencing 117076 4.0 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067644 3066258 otterfencing 116164 4.9 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3068030 3051808 otterfencing 115336 7.1 R 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 3066768 D - /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3066937 D page_wait_table /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3067611 D - /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3068015 D - php-fpm: pool cpanelphpmyadmin 3068185 D - /usr/sbin/httpd -k start 3068189 D - /usr/sbin/httpd -k start 3068204 D - /usr/sbin/httpd -k start 3068248 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +-----+----------------------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+----------------------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 532 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 526 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 521 | root | 108-1481181613 | Prepare | 0 | Checking table | uploads | | 511 | root | 108-1481181613 | Execute | 0 | Sending data | UPDATE quoteSections qs INNER JOIN ( SELECT sectionId,SUM(adjPrice*qty) AS total FROM quoteitems WHERE quoteid='79030' AND status = '1' GROUP BY sectionId ) qi ON qs.id = qi.sectionId SET qs.value = qi.total | +-----+----------------------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 367 otterfencing/otterfencing.com.au-ssl_log 309 evolution/portal.evolutionerp.com.au-ssl_log 135 evolution/app.evolutionerp.com.au-ssl_log 34 evolution/evolutionerp.com.au-ssl_log 12 madalice/madalice.com.au-ssl_log 6 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 309 35.221.22.116 271 203.54.180.238 102 103.104.165.99 56 150.228.151.47 34 40.115.94.245 30 1.144.107.82 20 165.225.233.87 16 101.182.108.127 15 103.104.164.114 11 20.48.250.41 9 182.239.240.254 7 180.181.236.49 4 147.161.213.78 1 66.249.68.64 1 62.60.130.199 --- top request paths across all vhosts (last 3 min) --- 183 POST /functions.php 67 GET /api/getItem/LWHG2001KG 55 GET /factory_session_checker.php 55 GET /app/ajax.php 40 GET /index.php 29 GET /factory_session_processed_qty.php 28 POST /app/ajax/selectFilter.php 28 GET /factory_session_joiner.php 26 GET /heartbeat.php 25 POST /plugins/csvexporter/plugin.php 18 POST /clienteditsave.php 10 POST /app/ajax/selectFilterSingle.php 9 POST /app/ajax.php 8 POST /quoteditsave.php 6 POST /plugins/pipe/pipetopostsave.php 4 POST /itemModify.php 3 GET /download.php 3 GET / 2 POST /reports/invoicesFilteredSave.php 2 POST //functions.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 187 POST /functions.php 58 GET /app/ajax.php 38 GET /index.php 28 POST /app/ajax/selectFilter.php 25 POST /plugins/csvexporter/plugin.php 18 POST /clienteditsave.php 10 POST /app/ajax/selectFilterSingle.php 9 POST /quoteditsave.php 9 POST /app/ajax.php 6 POST /plugins/pipe/pipetopostsave.php 4 POST /itemModify.php 4 GET /download.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:13:27:19 +1000] "GET /index.php?page=invcatedit&id=13&tab=collectionew-tab HTTP/1.1" 200 22414 "https://my.evolutionerp.com.au/index.php?page=invcatedit&id=13&tab=collectionew-tab" "Mozill 203.54.180.238 - - [02/Sep/2026:13:27:19 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=14196" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [02/Sep/2026:13:27:21 +1000] "GET /download.php?id=292902 HTTP/1.1" 200 26832 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29422&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap 150.228.151.47 - - [02/Sep/2026:13:27:24 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=12896062036 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 150.228.151.47 - - [02/Sep/2026:13:27:24 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dquotedit%26quoteid%3D2318%26sectionid%3D556&call=getUserSetting&caller=ajaxSubmitLocal&seq=13070615075 HTTP/1. 103.104.165.99 - - [02/Sep/2026:13:27:22 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=11256" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 101.182.108.127 - - [02/Sep/2026:13:27:08 +1000] "POST /quoteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79030" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 103.104.164.114 - - [02/Sep/2026:13:27:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 150.228.151.47 - - [02/Sep/2026:13:27:24 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid2318&call=getUserSetting&caller=ajaxSubmitLocal&seq=15041504171 HTTP/1.1" 200 95 "https://my.evolutionerp.com. 1.144.107.82 - - [02/Sep/2026:13:27:26 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 1 GET /website_backup.zst 1 GET /website_backup.zip 1 GET /website_backup.tgz 1 GET /website_backup.tar.gz 1 GET /website_backup.tar.bz2 1 GET /website_backup.sql.bz2 1 GET /website_backup.sql 1 GET /website_backup.gz 1 GET /website_backup.bz2 1 GET /website_backup.7z 1 GET /web_backup.zst 1 GET /web_backup.zip -- last 10 requests -- 35.221.22.116 - - [02/Sep/2026:13:26:49 +1000] "GET /repo.zip HTTP/1.1" 404 56725 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:50 +1000] "GET /releases.tar HTTP/1.1" 404 56733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:51 +1000] "GET /bundle.sql.gz HTTP/1.1" 404 56735 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:49 +1000] "GET /release.zip HTTP/1.1" 404 56731 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:49 +1000] "GET /build.tgz HTTP/1.1" 404 56727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:11 +1000] "GET /snapshot.zip HTTP/1.1" 404 56733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:27:03 +1000] "GET /project.tar.xz HTTP/1.1" 404 56737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:15 +1000] "GET /website_backup.zip HTTP/1.1" 404 56745 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:49 +1000] "GET /releases.gz HTTP/1.1" 404 56731 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:26:49 +1000] "GET /build.rar HTTP/1.1" 404 56727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 55 GET /factory_session_checker.php 29 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 26 GET /heartbeat.php 3 GET /index.php 1 POST /portal/register 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:13:27:09 +1000] "GET /factory_session_joiner.php?id=35059 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:13:27:05 +1000] "GET /heartbeat.php?sentAt=1788319600&bytes=106,151,151,112&_=1788317126769 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:27:12 +1000] "GET /index.php?page=inventory_picking_goods&pickid=37918&seq=2884435890510 HTTP/1.1" 200 10746 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&p 203.54.180.238 - - [02/Sep/2026:13:27:18 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37918&seq=2884435890510" "Mozilla/5.0 (Linux; Andro 203.54.180.238 - - [02/Sep/2026:13:27:12 +1000] "GET /heartbeat.php?sentAt=1788319610&bytes=106,151,151,122&_=1788317126770 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:27:18 +1000] "GET /heartbeat.php?sentAt=1788319620&bytes=106,151,151,132&_=1788317126771 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:27:19 +1000] "GET /heartbeat.php?sentAt=1788319630&bytes=106,151,151,142&_=1788317126772 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:27:20 +1000] "GET /heartbeat.php?sentAt=1788319640&bytes=106,151,151,152&_=1788317126773 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:27:21 +1000] "GET /heartbeat.php?sentAt=1788319615&bytes=106,151,151,127&_=1788267566532 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:27:23 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-09-02 13:24:29 L1=1.62 run=8 blk=0 avail=7863 (57.1%) swpO=0 conn=2 myRSS=3193 php=10 phpRSS=572 ap=46 tcp=56 topuser=evolution 2026-09-02 13:24:31 L1=1.62 run=6 blk=0 avail=7548 (54.8%) swpO=0 conn=4 myRSS=3194 php=12 phpRSS=935 ap=45 tcp=69 topuser=customc 2026-09-02 13:24:39 L1=1.52 run=3 blk=0 avail=8034 (58.3%) swpO=0 conn=2 myRSS=3194 php=4 phpRSS=231 ap=45 tcp=61 topuser=madalice 2026-09-02 13:24:41 L1=1.52 run=7 blk=0 avail=7892 (57.3%) swpO=0 conn=4 myRSS=3194 php=6 phpRSS=410 ap=44 tcp=61 topuser=madalice 2026-09-02 13:24:49 L1=1.29 run=2 blk=0 avail=8066 (58.5%) swpO=0 conn=1 myRSS=3194 php=4 phpRSS=205 ap=42 tcp=46 topuser=madalice 2026-09-02 13:24:51 L1=1.29 run=2 blk=0 avail=8021 (58.2%) swpO=0 conn=4 myRSS=3194 php=5 phpRSS=296 ap=41 tcp=45 topuser=madalice 2026-09-02 13:25:00 L1=1.16 run=1 blk=0 avail=8090 (58.7%) swpO=0 conn=1 myRSS=3194 php=3 phpRSS=188 ap=41 tcp=68 topuser=madalice 2026-09-02 13:25:01 L1=1.16 run=3 blk=0 avail=7971 (57.9%) swpO=0 conn=4 myRSS=3194 php=4 phpRSS=233 ap=49 tcp=71 topuser=madalice 2026-09-02 13:25:10 L1=1.13 run=2 blk=0 avail=7977 (57.9%) swpO=0 conn=1 myRSS=3194 php=3 phpRSS=189 ap=58 tcp=48 topuser=madalice 2026-09-02 13:25:11 L1=1.13 run=4 blk=0 avail=7927 (57.5%) swpO=0 conn=2 myRSS=3194 php=5 phpRSS=295 ap=57 tcp=51 topuser=madalice 2026-09-02 13:25:20 L1=0.96 run=1 blk=0 avail=8043 (58.4%) swpO=0 conn=1 myRSS=3194 php=3 phpRSS=189 ap=48 tcp=50 topuser=madalice 2026-09-02 13:25:21 L1=0.96 run=5 blk=0 avail=7996 (58.0%) swpO=0 conn=2 myRSS=3194 php=6 phpRSS=338 ap=47 tcp=54 topuser=madalice 2026-09-02 13:25:30 L1=0.88 run=5 blk=0 avail=8146 (59.1%) swpO=0 conn=1 myRSS=3194 php=3 phpRSS=120 ap=42 tcp=48 topuser=madalice 2026-09-02 13:25:31 L1=0.88 run=3 blk=0 avail=8137 (59.1%) swpO=0 conn=2 myRSS=3194 php=5 phpRSS=161 ap=41 tcp=56 topuser=madalice 2026-09-02 13:25:40 L1=0.75 run=2 blk=0 avail=8147 (59.1%) swpO=0 conn=1 myRSS=3194 php=4 phpRSS=185 ap=38 tcp=46 topuser=madalice 2026-09-02 13:25:41 L1=0.75 run=1 blk=0 avail=8170 (59.3%) swpO=0 conn=2 myRSS=3194 php=4 phpRSS=160 ap=38 tcp=50 topuser=madalice 2026-09-02 13:25:50 L1=1.01 run=2 blk=0 avail=8091 (58.7%) swpO=0 conn=1 myRSS=3194 php=4 phpRSS=229 ap=41 tcp=51 topuser=madalice 2026-09-02 13:25:51 L1=1.01 run=5 blk=0 avail=8004 (58.1%) swpO=0 conn=2 myRSS=3194 php=5 phpRSS=339 ap=41 tcp=50 topuser=evolution 2026-09-02 13:26:00 L1=1.01 run=1 blk=0 avail=8149 (59.2%) swpO=0 conn=1 myRSS=3194 php=3 phpRSS=187 ap=41 tcp=64 topuser=madalice 2026-09-02 13:26:01 L1=1.01 run=4 blk=0 avail=7948 (57.7%) swpO=0 conn=2 myRSS=3194 php=7 phpRSS=450 ap=45 tcp=67 topuser=evolution 2026-09-02 13:26:10 L1=5.00 run=74 blk=0 avail=4339 (31.5%) swpO=2130 conn=51 myRSS=3126 php=65 phpRSS=5617 ap=82 tcp=278 topuser=otterfencing 2026-09-02 13:26:11 L1=5.00 run=101 blk=0 avail=3516 (25.5%) swpO=3503 conn=60 myRSS=3082 php=79 phpRSS=6581 ap=128 tcp=313 topuser=otterfencing 2026-09-02 13:26:46 L1=81.11 run=14 blk=43 avail=3003 (21.8%) swpO=10897 conn=- myRSS=0 php=114 phpRSS=8398 ap=147 tcp=362 topuser=otterfencing 2026-09-02 13:26:46 L1=81.11 run=7 blk=12 avail=3061 (22.2%) swpO=17358 conn=- myRSS=0 php=113 phpRSS=8426 ap=148 tcp=359 topuser=otterfencing 2026-09-02 13:26:56 L1=81.11 run=141 blk=1 avail=3411 (24.8%) swpO=332 conn=111 myRSS=353 php=134 phpRSS=10566 ap=154 tcp=373 topuser=otterfencing 2026-09-02 13:26:56 L1=81.11 run=146 blk=2 avail=3404 (24.7%) swpO=0 conn=111 myRSS=354 php=135 phpRSS=10581 ap=155 tcp=377 topuser=otterfencing 2026-09-02 13:27:07 L1=91.73 run=42 blk=27 avail=601 (4.4%) swpO=9815 conn=- myRSS=470 php=138 phpRSS=13704 ap=160 tcp=395 topuser=otterfencing 2026-09-02 13:27:07 L1=91.73 run=45 blk=32 avail=574 (4.2%) swpO=14489 conn=- myRSS=474 php=126 phpRSS=13237 ap=163 tcp=394 topuser=otterfencing 2026-09-02 13:27:18 L1=102.09 run=128 blk=3 avail=1032 (7.5%) swpO=13654 conn=99 myRSS=537 php=126 phpRSS=13091 ap=175 tcp=416 topuser=otterfencing 2026-09-02 13:27:18 L1=102.09 run=123 blk=1 avail=1077 (7.8%) swpO=8980 conn=98 myRSS=538 php=123 phpRSS=13140 ap=175 tcp=420 topuser=otterfencing