INCIDENT 2026-09-02 13:32:35 trigger: mem_avail=11.8% load=129.64/10cpu php_procs=133 php_rss=12864MB mysql_conn=103 ================================================================== load: 129.64 94.86 45.74 129/960 3085337 ncpu:10 mem_avail: 1629MB/13777MB (11.8%) swap_used:3073MB swapout:486/s blocked(D):5 running:131 iowait:0.5% steal:0.0% php: 133 procs / 12864MB heaviest user: otterfencing (109 procs, 11426MB) apache: 160 procs tcp_estab: 265 --- RSS by user (all processes) --- USER PROCS RSS_MB otterfencing 109 11318 nobody 159 1374 evolution 30 823 mysql 1 618 madalice 3 503 root 249 362 corpkicks 1 162 netdata 7 152 mailnull 7 67 mailman 20 28 dovenull 6 15 zabbix 1 13 candyfabcom 1 12 cpanelphpmyadmin 1 8 aaa 5 8 dovecot 3 7 wp-toolkit 3 6 kurri 1 2 cpanelconnecttrack 1 2 dbus 1 1 --- php workers by user --- USER PROCS RSS_MB otterfencing 109 11364 evolution 19 773 madalice 3 503 corpkicks 1 162 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6344 MB Active(file): 1015 MB Inactive(file): 374 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 182 MB CommitLimit: 10984 MB Committed_AS: 30142 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-11:10:08 1872 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3067388 1 mysql 653516 29.8 Ssl 05:49 /usr/sbin/mariadbd 3075406 3929444 madalice 248612 4.0 S 01:44 php-fpm: pool madalice_com_au 3077683 3929444 madalice 188908 5.2 R 01:21 php-fpm: pool madalice_com_au 3082964 3066801 corpkicks 178504 7.2 R 00:24 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3082392 3066957 otterfencing 176640 7.7 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3080948 3051682 otterfencing 168120 5.0 R 00:46 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081486 3051634 otterfencing 166028 5.0 S 00:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081656 3066563 otterfencing 165832 7.1 R 00:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082198 3051810 otterfencing 165568 8.4 S 00:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082123 3066542 otterfencing 165432 7.1 R 00:33 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082486 3067478 otterfencing 164312 5.8 R 00:29 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081371 3066824 otterfencing 164176 6.3 R 00:40 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082320 3066474 otterfencing 162504 7.2 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3080932 3067176 otterfencing 160716 4.4 R 00:47 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081692 3066653 otterfencing 158612 5.0 R 00:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082270 3066804 otterfencing 158476 6.4 R 00:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081028 3067389 otterfencing 158184 5.2 R 00:44 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083419 3066543 otterfencing 157960 10.6 R 00:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082686 3066541 otterfencing 157216 6.3 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083015 3049465 otterfencing 155236 7.2 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082935 3051806 otterfencing 153892 7.3 R 00:24 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082790 3066562 otterfencing 152760 9.3 R 00:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082699 3067090 otterfencing 150400 8.3 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082228 3051804 otterfencing 149904 5.7 R 00:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081440 3066475 otterfencing 149168 5.5 R 00:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082299 3066706 otterfencing 147060 6.9 R 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3084326 3066538 otterfencing 146716 17.2 R 00:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082127 3067392 otterfencing 143988 5.8 R 00:32 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081719 3066810 otterfencing 143528 5.3 R 00:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083095 3067483 otterfencing 140148 7.3 R 00:23 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081623 3066713 otterfencing 139108 5.2 R 00:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 508924 1 netdata 138480 2.0 Ssl 5-11:12:57 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3082746 3066550 otterfencing 137420 7.5 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083728 3066803 otterfencing 134340 9.0 R 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3084199 3066719 otterfencing 132816 13.2 R 00:11 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083461 3066540 otterfencing 131868 9.9 R 00:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083365 3050923 otterfencing 129824 9.3 R 00:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3081860 3066552 otterfencing 129600 5.2 R 00:35 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3084609 3066708 otterfencing 129276 19.3 R 00:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083836 3067248 otterfencing 128720 9.4 R 00:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083525 3067032 otterfencing 128152 8.7 R 00:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082785 3066805 otterfencing 125380 4.4 R 00:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 706071 655564 root 124592 0.0 S 10:54:38 spamd child 3082424 3067103 otterfencing 123684 5.0 R 00:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3084003 3066651 otterfencing 122068 10.7 R 00:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083835 3051680 otterfencing 120188 9.9 R 00:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083652 3066656 otterfencing 115248 5.9 R 00:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083658 3066717 otterfencing 112224 6.1 R 00:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3084524 3067390 otterfencing 110324 11.5 R 00:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083521 3066432 otterfencing 109832 5.3 R 00:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083527 3051099 otterfencing 109440 7.0 R 00:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083857 3066828 otterfencing 109236 9.2 R 00:14 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082721 3051807 otterfencing 108068 5.7 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083981 3050681 otterfencing 108028 7.9 R 00:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083418 3049586 otterfencing 107900 7.0 R 00:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083988 3067480 otterfencing 107200 9.1 R 00:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083124 3066822 otterfencing 106572 5.4 R 00:22 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3082694 3066802 otterfencing 105392 4.4 R 00:26 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3083343 3067102 otterfencing 104320 4.7 R 00:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3084884 3066842 otterfencing 104216 19.8 R 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 3082964 D - /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3084747 D - /usr/local/cpanel/scripts/restartsrv_cpanel_php_fpm --check --notconfigured-ok 3085413 D - cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3085501 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +-------+--------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-------+--------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9394 | lecsafec_evo | lecsafec_icatv2 | Execute | 181 | Sending data | update assets,results set results.asset_id=assets.id WHERE assets.uploadid='39206' AND results.uploadid=assets.uploadid AND assets.assetkey=results.assetkey AND assets.jobid=results.jobid | | 18017 | root | 108-1481181613 | Execute | 7 | Sending data | SELECT GROUP_CONCAT(DISTINCT srcid) as d FROM stockmovement WHERE src = ? AND type = ? AND jobitemid IN (SELECT id FROM jobInventory WHERE jobid = ?) ORDER BY srcid | | 18067 | root | 85-1559715131 | Execute | 2 | Creating sort index | select dispatch.*,contacts.company from dispatch,contacts,jobs where dispatch.contactid = contacts.clientid and dispatch.jobid = jobs.id and dispatch.invoiceid = 0 and dispatch.date > date_sub(dispatch.date, interval 30 day) and jobs.status > 0 order by dispatch.statu | | 18086 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 17312 | otterfen_wp | otterfen_wp | Query | 0 | Writing to net | SELECT RrBWkT6j_posts.* FROM RrBWkT6j_posts WHERE 1=1 AND (RrBWkT6j_posts.ID = '0') AND RrBWkT6j_posts.post_type = 'page' ORDER BY RrBWkT6j_posts.post_date DESC | +-------+--------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min otterfencing/otterfencing.com.au-ssl_log 499 evolution/my.evolutionerp.com.au-ssl_log 294 evolution/portal.evolutionerp.com.au-ssl_log 125 evolution/app.evolutionerp.com.au-ssl_log 93 aaa/aaadownunder.com.au-ssl_log 18 madalice/madalice.com.au-ssl_log 7 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 499 35.221.22.116 256 203.54.180.238 101 40.115.94.245 73 103.104.165.99 36 103.104.164.114 28 101.182.108.127 27 182.239.240.254 25 1.144.107.82 5 165.225.233.87 4 180.181.236.49 3 147.161.213.78 2 114.119.143.14 2 101.166.96.210 1 52.167.144.167 1 150.228.151.47 --- top request paths across all vhosts (last 3 min) --- 163 POST /functions.php 45 GET /factory_session_checker.php 40 GET /api/getItem/LWPB2001KG 37 GET /app/ajax.php 36 GET /heartbeat.php 24 GET /index.php 22 GET /factory_session_processed_qty.php 22 GET /factory_session_joiner.php 16 POST /app/ajax.php 11 POST /plugins/csvexporter/plugin.php 8 POST /plugins/shopify/plugin.php 7 POST /app/ajax/selectFilterSingle.php 6 POST /app/ajax/selectFilter.php 5 POST /clienteditsave.php 5 GET /store/custom-af1-drippy-swoosh/ 3 POST /portal/register 3 GET /plugins/fensa/fensa-ajax.php 3 GET //index.php 3 GET / 2 POST /quoteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 1 GET /zend.zip 1 GET /zend.tgz 1 GET /zend.tar.gz 1 GET /zend.tar 1 GET /yii.zst 1 GET /yii.zip 1 GET /yii.tgz 1 GET /yii.tar.xz 1 GET /yii.tar.gz 1 GET /yii.tar.bz2 1 GET /yii.tar 1 GET /yii.sql.gz -- last 10 requests -- 35.221.22.116 - - [02/Sep/2026:13:32:17 +1000] "GET /sessions.zip HTTP/1.1" 404 56733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:05 +1000] "GET /tmp.7z HTTP/1.1" 404 56721 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:04 +1000] "GET /error_log.tgz HTTP/1.1" 404 56735 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:21 +1000] "GET /sessions.sql HTTP/1.1" 404 56732 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:10 +1000] "GET /temp.tar.xz HTTP/1.1" 404 56731 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:25 +1000] "GET /seeds.tgz HTTP/1.1" 404 56727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:31:58 +1000] "GET /log.tar.gz HTTP/1.1" 404 56729 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:08 +1000] "GET /tmp.sql.bz2 HTTP/1.1" 404 56731 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:31:52 +1000] "GET /inventory.zip HTTP/1.1" 404 56735 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:32:11 +1000] "GET /cache.tgz HTTP/1.1" 404 56727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 163 POST /functions.php 37 GET /app/ajax.php 21 GET /index.php 16 POST /app/ajax.php 11 POST /plugins/csvexporter/plugin.php 8 POST /plugins/shopify/plugin.php 7 POST /app/ajax/selectFilterSingle.php 6 POST /app/ajax/selectFilter.php 5 POST /clienteditsave.php 3 GET /plugins/fensa/fensa-ajax.php 3 GET //index.php 3 GET / -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:13:32:22 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29219&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.165.99 - - [02/Sep/2026:13:32:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [02/Sep/2026:13:32:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43960" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [02/Sep/2026:13:32:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29539&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [02/Sep/2026:13:32:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6666&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [02/Sep/2026:13:32:26 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [02/Sep/2026:13:32:21 +1000] "POST /quoteditsave.php?call=getTheQuotes HTTP/1.1" 200 12266 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 203.54.180.238 - - [02/Sep/2026:13:32:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 103.104.165.99 - - [02/Sep/2026:13:32:25 +1000] "GET / HTTP/1.1" 200 7534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 103.104.165.99 - - [02/Sep/2026:13:32:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 45 GET /factory_session_checker.php 36 GET /heartbeat.php 22 GET /factory_session_processed_qty.php 22 GET /factory_session_joiner.php 3 POST /portal/register 3 GET /index.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:13:32:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:32:26 +1000] "GET /factory_session_joiner.php?id=35053 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:13:32:25 +1000] "GET /heartbeat.php?sentAt=1788319945&bytes=106,151,152,201&_=1788319784248 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:13:32:23 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:32:25 +1000] "GET /heartbeat.php?sentAt=1788319945&bytes=106,151,152,201&_=1788267566565 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:13:32:29 +1000] "GET /factory_session_joiner.php?id=35059 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:13:32:30 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:13:32:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:32:30 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:13:32:28 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb --- last 30 samples (run-up to this incident) --- 2026-09-02 13:29:55 L1=122.34 run=115 blk=2 avail=1726 (12.5%) swpO=0 conn=99 myRSS=723 php=119 phpRSS=12056 ap=154 tcp=395 topuser=otterfencing 2026-09-02 13:30:04 L1=123.34 run=132 blk=3 avail=2983 (21.7%) swpO=1022 conn=93 myRSS=698 php=114 phpRSS=10714 ap=173 tcp=404 topuser=otterfencing 2026-09-02 13:30:06 L1=123.34 run=142 blk=0 avail=2447 (17.8%) swpO=1022 conn=96 myRSS=699 php=128 phpRSS=11792 ap=165 tcp=405 topuser=otterfencing 2026-09-02 13:30:14 L1=123.90 run=140 blk=4 avail=841 (6.1%) swpO=2244 conn=109 myRSS=654 php=134 phpRSS=13483 ap=163 tcp=397 topuser=otterfencing 2026-09-02 13:30:18 L1=123.90 run=118 blk=5 avail=674 (4.9%) swpO=4482 conn=109 myRSS=622 php=134 phpRSS=13498 ap=164 tcp=400 topuser=otterfencing 2026-09-02 13:30:25 L1=124.63 run=109 blk=24 avail=772 (5.6%) swpO=3891 conn=111 myRSS=611 php=138 phpRSS=13701 ap=154 tcp=410 topuser=otterfencing 2026-09-02 13:30:28 L1=124.63 run=128 blk=3 avail=795 (5.8%) swpO=2160 conn=106 myRSS=580 php=126 phpRSS=13424 ap=159 tcp=408 topuser=otterfencing 2026-09-02 13:30:38 L1=125.74 run=133 blk=0 avail=1243 (9.0%) swpO=0 conn=107 myRSS=583 php=137 phpRSS=13064 ap=156 tcp=413 topuser=otterfencing 2026-09-02 13:30:48 L1=126.24 run=130 blk=0 avail=1034 (7.5%) swpO=524 conn=107 myRSS=584 php=129 phpRSS=12913 ap=158 tcp=410 topuser=otterfencing 2026-09-02 13:30:49 L1=128.86 run=110 blk=22 avail=992 (7.2%) swpO=800 conn=106 myRSS=582 php=129 phpRSS=12988 ap=160 tcp=403 topuser=otterfencing 2026-09-02 13:30:58 L1=128.13 run=116 blk=0 avail=2210 (16.0%) swpO=2903 conn=98 myRSS=606 php=119 phpRSS=11426 ap=156 tcp=409 topuser=otterfencing 2026-09-02 13:31:00 L1=128.13 run=131 blk=0 avail=2066 (15.0%) swpO=2012 conn=103 myRSS=606 php=128 phpRSS=11808 ap=156 tcp=409 topuser=otterfencing 2026-09-02 13:31:09 L1=128.66 run=141 blk=1 avail=1314 (9.5%) swpO=588 conn=108 myRSS=636 php=132 phpRSS=12811 ap=157 tcp=409 topuser=otterfencing 2026-09-02 13:31:10 L1=128.66 run=137 blk=3 avail=1330 (9.7%) swpO=1161 conn=108 myRSS=627 php=131 phpRSS=12912 ap=158 tcp=407 topuser=otterfencing 2026-09-02 13:31:20 L1=129.89 run=141 blk=3 avail=1047 (7.6%) swpO=2011 conn=108 myRSS=629 php=132 phpRSS=13130 ap=155 tcp=415 topuser=otterfencing 2026-09-02 13:31:21 L1=129.89 run=136 blk=0 avail=1622 (11.8%) swpO=1644 conn=107 myRSS=628 php=127 phpRSS=12549 ap=157 tcp=409 topuser=otterfencing 2026-09-02 13:31:30 L1=130.52 run=129 blk=2 avail=1103 (8.0%) swpO=861 conn=110 myRSS=615 php=135 phpRSS=13032 ap=155 tcp=415 topuser=otterfencing 2026-09-02 13:31:31 L1=130.52 run=132 blk=1 avail=1131 (8.2%) swpO=750 conn=108 myRSS=615 php=128 phpRSS=12979 ap=162 tcp=416 topuser=otterfencing 2026-09-02 13:31:42 L1=130.37 run=150 blk=4 avail=748 (5.4%) swpO=4415 conn=109 myRSS=586 php=134 phpRSS=13585 ap=163 tcp=413 topuser=otterfencing 2026-09-02 13:31:53 L1=132.23 run=86 blk=62 avail=820 (6.0%) swpO=29782 conn=102 myRSS=541 php=118 phpRSS=13023 ap=170 tcp=406 topuser=otterfencing 2026-09-02 13:31:51 L1=132.23 run=83 blk=51 avail=467 (3.4%) swpO=17385 conn=102 myRSS=541 php=126 phpRSS=13751 ap=167 tcp=404 topuser=otterfencing 2026-09-02 13:32:03 L1=131.81 run=118 blk=1 avail=3542 (25.7%) swpO=1811 conn=85 myRSS=544 php=116 phpRSS=10271 ap=158 tcp=419 topuser=otterfencing 2026-09-02 13:32:04 L1=131.81 run=124 blk=1 avail=3421 (24.8%) swpO=2245 conn=87 myRSS=544 php=115 phpRSS=10355 ap=160 tcp=423 topuser=otterfencing 2026-09-02 13:32:14 L1=130.45 run=122 blk=0 avail=2045 (14.8%) swpO=0 conn=101 myRSS=547 php=126 phpRSS=12019 ap=154 tcp=412 topuser=otterfencing 2026-09-02 13:32:14 L1=130.45 run=122 blk=1 avail=1921 (13.9%) swpO=0 conn=103 myRSS=547 php=126 phpRSS=12143 ap=153 tcp=412 topuser=otterfencing 2026-09-02 13:32:24 L1=129.72 run=120 blk=0 avail=1753 (12.7%) swpO=0 conn=105 myRSS=551 php=126 phpRSS=12104 ap=154 tcp=412 topuser=otterfencing 2026-09-02 13:32:25 L1=129.72 run=120 blk=0 avail=1777 (12.9%) swpO=0 conn=106 myRSS=551 php=124 phpRSS=12187 ap=155 tcp=413 topuser=otterfencing 2026-09-02 13:32:35 L1=129.64 run=131 blk=5 avail=1629 (11.8%) swpO=486 conn=103 myRSS=616 php=133 phpRSS=12864 ap=160 tcp=265 topuser=otterfencing 2026-09-02 13:32:35 L1=129.64 run=133 blk=0 avail=1607 (11.7%) swpO=535 conn=101 myRSS=618 php=133 phpRSS=12680 ap=158 tcp=364 topuser=otterfencing 2026-09-02 13:32:46 L1=130.23 run=131 blk=0 avail=1590 (11.5%) swpO=576 conn=103 myRSS=637 php=132 phpRSS=12603 ap=162 tcp=426 topuser=otterfencing