INCIDENT 2026-09-02 13:31:30 trigger: mem_avail=8.0% load=130.52/10cpu php_procs=135 php_rss=13032MB mysql_conn=110 ================================================================== load: 130.52 86.29 39.61 131/941 3079387 ncpu:10 mem_avail: 1103MB/13777MB (8.0%) swap_used:2947MB swapout:861/s blocked(D):2 running:129 iowait:1.4% steal:0.0% php: 135 procs / 13032MB heaviest user: otterfencing (115 procs, 11872MB) apache: 155 procs tcp_estab: 415 --- RSS by user (all processes) --- USER PROCS RSS_MB otterfencing 112 11895 nobody 159 1442 mysql 1 615 evolution 21 497 madalice 3 349 root 248 327 corpkicks 1 212 netdata 7 143 mailman 20 28 mailnull 4 20 dovenull 6 15 zabbix 1 13 candyfabcom 1 12 kamcool 1 11 aaa 5 11 wp-toolkit 3 6 dovecot 3 6 kurri 1 3 dbus 1 2 cpanelconnecttrack 1 2 --- php workers by user --- USER PROCS RSS_MB otterfencing 113 11950 evolution 13 461 madalice 3 349 corpkicks 1 213 root 1 1 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6346 MB Active(file): 729 MB Inactive(file): 309 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 174 MB CommitLimit: 10984 MB Committed_AS: 29529 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-11:09:03 1456 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3067388 1 mysql 630480 30.6 Ssl 04:44 /usr/sbin/mariadbd 3075268 3066715 corpkicks 219080 5.1 R 00:40 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3075441 3066842 otterfencing 176992 5.6 D 00:38 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076718 3066706 otterfencing 176020 8.2 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076674 3066819 otterfencing 175824 7.8 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076008 3066848 otterfencing 175384 6.7 R 00:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076187 3066710 otterfencing 175168 7.1 D 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076159 3050923 otterfencing 174996 7.4 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076973 3051804 otterfencing 173908 9.3 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077802 3051811 otterfencing 169036 15.3 R 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076632 3066643 otterfencing 167804 8.0 R 00:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075110 3066558 otterfencing 167628 5.3 R 00:42 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3073656 3066657 otterfencing 164432 4.6 R 00:56 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3074861 3066623 otterfencing 163320 5.3 R 00:45 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3074982 3067091 otterfencing 157772 5.4 R 00:44 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076561 3051680 otterfencing 157372 7.5 R 00:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076487 3066804 otterfencing 157312 7.4 R 00:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3070525 3929444 madalice 157020 3.5 S 02:23 php-fpm: pool madalice_com_au 3076777 3067479 otterfencing 156824 8.2 R 00:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075014 3067391 otterfencing 155892 5.2 R 00:43 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3074616 3066814 otterfencing 153524 5.8 R 00:48 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076628 3066474 otterfencing 152836 8.6 D 00:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077034 3066554 otterfencing 148584 6.8 R 00:22 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075198 3066818 otterfencing 148308 4.7 R 00:41 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 706071 655564 root 147348 0.0 S 10:53:33 spamd child 3076645 3066541 otterfencing 147020 7.5 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077235 3066476 otterfencing 146988 8.6 R 00:21 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075740 3066802 otterfencing 146896 4.8 R 00:35 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077000 3066821 otterfencing 144792 11.1 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076704 3066551 otterfencing 144576 7.2 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076881 3066843 otterfencing 142868 8.1 R 00:24 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077413 3067248 otterfencing 142380 10.1 R 00:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075887 3067029 otterfencing 141392 4.9 R 00:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076967 3066477 otterfencing 137440 6.4 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076313 3066560 otterfencing 136204 6.0 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076748 3066998 otterfencing 135884 5.5 R 00:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075406 3929444 madalice 135292 4.3 S 00:39 php-fpm: pool madalice_com_au 3076966 3066711 otterfencing 134892 7.1 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075985 3067247 otterfencing 131820 5.6 R 00:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075660 3066850 otterfencing 130260 5.0 R 00:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 508924 1 netdata 129536 2.0 Ssl 5-11:11:52 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3075624 3051677 otterfencing 129480 5.1 R 00:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077005 3066550 otterfencing 129208 6.2 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076191 3066432 otterfencing 127684 4.3 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3078045 3051635 otterfencing 127044 10.1 R 00:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077054 3066555 otterfencing 124596 7.3 R 00:22 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076132 3066612 otterfencing 124528 5.2 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076963 3066640 otterfencing 124524 5.9 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077122 3066441 otterfencing 121716 5.6 R 00:22 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077945 3051099 otterfencing 118408 10.1 R 00:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076582 3067102 otterfencing 116420 5.5 R 00:27 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076386 3067033 otterfencing 115076 5.1 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077800 3066556 otterfencing 114952 7.3 R 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077553 3066810 otterfencing 113388 5.8 R 00:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076671 3048964 otterfencing 112880 6.1 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3078338 3051682 otterfencing 111224 8.9 R 00:11 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3075947 3066257 otterfencing 110728 4.8 R 00:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3078433 3066828 otterfencing 108208 8.7 R 00:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077550 3067483 otterfencing 107900 7.1 R 00:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077899 3066562 otterfencing 107008 7.3 R 00:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 509671 Dl get_swap_page /usr/libexec/netdata/plugins.d/apps.plugin 1 3075441 D get_swap_page /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076187 D get_swap_page /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3076628 D get_swap_page /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3078638 D get_swap_page /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- mariadb processlist (non-sleeping) --- +-------+----------------------+--------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-------+----------------------+--------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9394 | lecsafec_evo | lecsafec_icatv2 | Execute | 116 | Sending data | update assets,results set results.asset_id=assets.id WHERE assets.uploadid='39206' AND results.uploadid=assets.uploadid AND assets.assetkey=results.assetkey AND assets.jobid=results.jobid | | 16645 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 16644 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 14041 | corpkicks_wp_iwddf | corpkicks_wp_baolr | Query | 0 | Statistics | SELECT a.hook FROM MPHOrV_actionscheduler_actions a JOIN MPHOrV_actionscheduler_groups g ON g.group_id = a.group_id WHERE g.slug = 'wpforms' AND a.status IN ( 'in-progress', 'pending' ) | +-------+----------------------+--------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min otterfencing/otterfencing.com.au-ssl_log 444 evolution/my.evolutionerp.com.au-ssl_log 306 evolution/portal.evolutionerp.com.au-ssl_log 108 evolution/app.evolutionerp.com.au-ssl_log 93 aaa/aaadownunder.com.au-ssl_log 32 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 444 35.221.22.116 238 203.54.180.238 93 40.115.94.245 71 103.104.165.99 45 103.104.164.114 27 101.182.108.127 26 1.144.107.82 16 182.239.240.254 14 150.228.151.47 7 101.166.96.210 5 180.181.236.49 3 165.225.233.87 2 147.161.213.78 1 40.74.209.102 1 147.161.215.96 --- top request paths across all vhosts (last 3 min) --- 175 POST /functions.php 40 GET /app/ajax.php 37 GET /api/getItem/LWPB2001KG 35 GET /factory_session_checker.php 29 GET /index.php 28 GET /heartbeat.php 19 GET /factory_session_processed_qty.php 19 GET /factory_session_joiner.php 12 POST /plugins/shopify/plugin.php 12 POST /plugins/csvexporter/plugin.php 11 POST /app/ajax.php 9 POST /app/ajax/selectFilterSingle.php 6 POST /clienteditsave.php 6 POST /app/ajax/selectFilter.php 4 GET / 3 POST /quoteditsave.php 3 POST /portal/register 3 POST //functions.php 2 POST /plugins/fencecosting/plugin.php 2 POST /opportunityeditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 1 GET /zend.zip 1 GET /zend.tgz 1 GET /zend.tar.gz 1 GET /zend.tar 1 GET /yii.zst 1 GET /yii.zip 1 GET /yii.tgz 1 GET /yii.tar.xz 1 GET /yii.tar.gz 1 GET /yii.tar.bz2 1 GET /yii.tar 1 GET /yii.sql.gz -- last 10 requests -- 35.221.22.116 - - [02/Sep/2026:13:30:46 +1000] "GET /contao.tar.bz2 HTTP/1.1" 404 56737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:31:05 +1000] "GET /poetry.sql HTTP/1.1" 404 56729 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:30:53 +1000] "GET /concrete5.sql.bz2 HTTP/1.1" 404 56743 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:31:01 +1000] "GET /strapi.tgz HTTP/1.1" 404 56729 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:30:49 +1000] "GET /concrete5.tar.bz2 HTTP/1.1" 404 56743 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:31:16 +1000] "GET /.venv.tar.gz HTTP/1.1" 404 56733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:30:35 +1000] "GET /zend.tar HTTP/1.1" 404 15384 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:31:09 +1000] "GET /virtualenv.tgz HTTP/1.1" 404 56737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:30:50 +1000] "GET /concrete5.7z HTTP/1.1" 404 56733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:30:59 +1000] "GET /ghost.zst HTTP/1.1" 404 56727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 175 POST /functions.php 40 GET /app/ajax.php 26 GET /index.php 12 POST /plugins/shopify/plugin.php 12 POST /plugins/csvexporter/plugin.php 11 POST /app/ajax.php 9 POST /app/ajax/selectFilterSingle.php 6 POST /clienteditsave.php 6 POST /app/ajax/selectFilter.php 3 POST /quoteditsave.php 3 POST //functions.php 3 GET / -- last 10 requests -- 182.239.240.254 - - [02/Sep/2026:13:31:32 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [02/Sep/2026:13:31:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/ 103.104.165.99 - - [02/Sep/2026:13:31:33 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 3913 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12095" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 1.144.107.82 - - [02/Sep/2026:13:31:32 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=plugins&id=23&action=setting" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [02/Sep/2026:13:31:27 +1000] "GET //index.php?page=dispatchedit&dispatchid=3871 HTTP/1.1" 200 7624 "https://my.evolutionerp.com.au//index.php?page=dispatch" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [02/Sep/2026:13:31:32 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=16664928047 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 101.182.108.127 - - [02/Sep/2026:13:31:33 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=13861826362 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.165.99 - - [02/Sep/2026:13:31:34 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D12095&call=getUserSetting&caller=ajaxSubmitLocal&seq=19272241936 HTTP/1.1" 200 161 "https://my.evolutionerp.com.a 101.182.108.127 - - [02/Sep/2026:13:31:36 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dopportunityedit%26opportunityid%3D8549&call=getUserSetting&caller=ajaxSubmitLocal&seq=15490538261 HTTP/1.1" 2 101.182.108.127 - - [02/Sep/2026:13:31:36 +1000] "POST /app/ajax.php?call=ts&tsact=tsUpdateTimesheetNominalRates HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8549" "Mozill == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 35 GET /factory_session_checker.php 28 GET /heartbeat.php 19 GET /factory_session_processed_qty.php 19 GET /factory_session_joiner.php 3 POST /portal/register 3 GET /index.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:13:31:19 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:31:16 +1000] "GET /factory_session_joiner.php?id=35057 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:13:31:19 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:31:21 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:13:31:21 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:13:31:21 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:13:31:22 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:31:22 +1000] "GET /factory_session_joiner.php?id=35059 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:13:31:21 +1000] "GET /heartbeat.php?sentAt=1788319855&bytes=106,151,152,111&_=1788267566556 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:31:24 +1000] "GET /heartbeat.php?sentAt=1788319865&bytes=106,151,152,121&_=1788267566557 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-09-02 13:28:48 L1=111.27 run=123 blk=9 avail=837 (6.1%) swpO=5173 conn=109 myRSS=846 php=119 phpRSS=13077 ap=165 tcp=411 topuser=otterfencing 2026-09-02 13:28:48 L1=113.25 run=142 blk=10 avail=821 (6.0%) swpO=5690 conn=107 myRSS=846 php=123 phpRSS=13021 ap=163 tcp=403 topuser=otterfencing 2026-09-02 13:28:59 L1=117.12 run=107 blk=70 avail=352 (2.6%) swpO=35782 conn=110 myRSS=819 php=125 phpRSS=13487 ap=168 tcp=413 topuser=otterfencing 2026-09-02 13:28:59 L1=117.12 run=14 blk=114 avail=311 (2.3%) swpO=35808 conn=109 myRSS=819 php=124 phpRSS=13429 ap=168 tcp=414 topuser=otterfencing 2026-09-02 13:29:11 L1=126.88 run=143 blk=3 avail=545 (4.0%) swpO=12155 conn=102 myRSS=713 php=132 phpRSS=10227 ap=160 tcp=302 topuser=otterfencing 2026-09-02 13:29:11 L1=126.88 run=144 blk=21 avail=546 (4.0%) swpO=12140 conn=104 myRSS=713 php=131 phpRSS=10217 ap=160 tcp=302 topuser=otterfencing 2026-09-02 13:29:22 L1=127.31 run=133 blk=1 avail=1937 (14.1%) swpO=24 conn=111 myRSS=733 php=125 phpRSS=10915 ap=156 tcp=439 topuser=otterfencing 2026-09-02 13:29:22 L1=127.31 run=133 blk=2 avail=1942 (14.1%) swpO=14 conn=110 myRSS=733 php=127 phpRSS=11010 ap=156 tcp=440 topuser=otterfencing 2026-09-02 13:29:32 L1=126.80 run=74 blk=46 avail=1038 (7.5%) swpO=399 conn=109 myRSS=736 php=126 phpRSS=12682 ap=156 tcp=436 topuser=otterfencing 2026-09-02 13:29:43 L1=126.53 run=124 blk=0 avail=1313 (9.5%) swpO=3594 conn=104 myRSS=704 php=118 phpRSS=12449 ap=162 tcp=399 topuser=otterfencing 2026-09-02 13:29:45 L1=126.49 run=120 blk=6 avail=1722 (12.5%) swpO=1892 conn=109 myRSS=710 php=121 phpRSS=12205 ap=157 tcp=405 topuser=otterfencing 2026-09-02 13:29:53 L1=122.34 run=106 blk=0 avail=2271 (16.5%) swpO=0 conn=100 myRSS=719 php=115 phpRSS=11345 ap=157 tcp=397 topuser=otterfencing 2026-09-02 13:29:55 L1=122.34 run=115 blk=2 avail=1726 (12.5%) swpO=0 conn=99 myRSS=723 php=119 phpRSS=12056 ap=154 tcp=395 topuser=otterfencing 2026-09-02 13:30:04 L1=123.34 run=132 blk=3 avail=2983 (21.7%) swpO=1022 conn=93 myRSS=698 php=114 phpRSS=10714 ap=173 tcp=404 topuser=otterfencing 2026-09-02 13:30:06 L1=123.34 run=142 blk=0 avail=2447 (17.8%) swpO=1022 conn=96 myRSS=699 php=128 phpRSS=11792 ap=165 tcp=405 topuser=otterfencing 2026-09-02 13:30:14 L1=123.90 run=140 blk=4 avail=841 (6.1%) swpO=2244 conn=109 myRSS=654 php=134 phpRSS=13483 ap=163 tcp=397 topuser=otterfencing 2026-09-02 13:30:18 L1=123.90 run=118 blk=5 avail=674 (4.9%) swpO=4482 conn=109 myRSS=622 php=134 phpRSS=13498 ap=164 tcp=400 topuser=otterfencing 2026-09-02 13:30:25 L1=124.63 run=109 blk=24 avail=772 (5.6%) swpO=3891 conn=111 myRSS=611 php=138 phpRSS=13701 ap=154 tcp=410 topuser=otterfencing 2026-09-02 13:30:28 L1=124.63 run=128 blk=3 avail=795 (5.8%) swpO=2160 conn=106 myRSS=580 php=126 phpRSS=13424 ap=159 tcp=408 topuser=otterfencing 2026-09-02 13:30:38 L1=125.74 run=133 blk=0 avail=1243 (9.0%) swpO=0 conn=107 myRSS=583 php=137 phpRSS=13064 ap=156 tcp=413 topuser=otterfencing 2026-09-02 13:30:48 L1=126.24 run=130 blk=0 avail=1034 (7.5%) swpO=524 conn=107 myRSS=584 php=129 phpRSS=12913 ap=158 tcp=410 topuser=otterfencing 2026-09-02 13:30:49 L1=128.86 run=110 blk=22 avail=992 (7.2%) swpO=800 conn=106 myRSS=582 php=129 phpRSS=12988 ap=160 tcp=403 topuser=otterfencing 2026-09-02 13:30:58 L1=128.13 run=116 blk=0 avail=2210 (16.0%) swpO=2903 conn=98 myRSS=606 php=119 phpRSS=11426 ap=156 tcp=409 topuser=otterfencing 2026-09-02 13:31:00 L1=128.13 run=131 blk=0 avail=2066 (15.0%) swpO=2012 conn=103 myRSS=606 php=128 phpRSS=11808 ap=156 tcp=409 topuser=otterfencing 2026-09-02 13:31:09 L1=128.66 run=141 blk=1 avail=1314 (9.5%) swpO=588 conn=108 myRSS=636 php=132 phpRSS=12811 ap=157 tcp=409 topuser=otterfencing 2026-09-02 13:31:10 L1=128.66 run=137 blk=3 avail=1330 (9.7%) swpO=1161 conn=108 myRSS=627 php=131 phpRSS=12912 ap=158 tcp=407 topuser=otterfencing 2026-09-02 13:31:20 L1=129.89 run=141 blk=3 avail=1047 (7.6%) swpO=2011 conn=108 myRSS=629 php=132 phpRSS=13130 ap=155 tcp=415 topuser=otterfencing 2026-09-02 13:31:21 L1=129.89 run=136 blk=0 avail=1622 (11.8%) swpO=1644 conn=107 myRSS=628 php=127 phpRSS=12549 ap=157 tcp=409 topuser=otterfencing 2026-09-02 13:31:30 L1=130.52 run=129 blk=2 avail=1103 (8.0%) swpO=861 conn=110 myRSS=615 php=135 phpRSS=13032 ap=155 tcp=415 topuser=otterfencing 2026-09-02 13:31:31 L1=130.52 run=132 blk=1 avail=1131 (8.2%) swpO=750 conn=108 myRSS=615 php=128 phpRSS=12979 ap=162 tcp=416 topuser=otterfencing