INCIDENT 2026-09-02 13:35:04 trigger: load=151.72/10cpu php_procs=75 php_rss=7248MB mysql_conn=58 ================================================================== load: 151.72 116.67 61.14 61/901 3090372 ncpu:10 mem_avail: 4616MB/13777MB (33.5%) swap_used:3503MB swapout:457/s blocked(D):2 running:69 iowait:8.3% steal:0.0% php: 75 procs / 7248MB heaviest user: otterfencing (43 procs, 5050MB) apache: 159 procs tcp_estab: 156 --- RSS by user (all processes) --- USER PROCS RSS_MB otterfencing 41 4744 madalice 10 1576 nobody 157 1082 mysql 1 611 evolution 28 511 root 276 350 netdata 9 155 corpkicks 1 132 mailman 20 31 cpanellogin 1 15 vinesit 1 13 candyfabcom 1 12 wp-toolkit 3 9 aaa 7 8 zabbix 1 7 kurri 1 3 dovenull 6 3 dovecot 3 3 dbus 1 2 cpanelconnecttrack 1 2 --- php workers by user --- USER PROCS RSS_MB otterfencing 41 4743 madalice 10 1579 evolution 19 501 corpkicks 1 132 root 1 1 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3533 MB Active(file): 439 MB Inactive(file): 332 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 179 MB CommitLimit: 10984 MB Committed_AS: 20413 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3090137 root 00:04 1340 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 1-11:12:36 1968 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3067388 1 mysql 628204 35.6 Ssl 08:17 /usr/sbin/mariadbd 3089295 3929444 madalice 194516 4.4 R 01:31 php-fpm: pool madalice_com_au 3089978 3929444 madalice 172904 12.1 D 00:10 php-fpm: pool madalice_com_au 3089863 3066556 otterfencing 172900 7.6 R 00:59 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089976 3929444 madalice 172796 14.5 R 00:10 php-fpm: pool madalice_com_au 3089883 3929444 madalice 172600 3.8 R 00:40 php-fpm: pool madalice_com_au 3089887 3929444 madalice 172476 3.7 R 00:37 php-fpm: pool madalice_com_au 3089986 3929444 madalice 171928 10.8 R 00:09 php-fpm: pool madalice_com_au 3075406 3929444 madalice 166520 3.9 R 04:12 php-fpm: pool madalice_com_au 3083875 3929444 madalice 164272 5.0 R 02:42 php-fpm: pool madalice_com_au 3089577 3066640 otterfencing 160028 4.7 S 01:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089768 3066843 otterfencing 150232 6.8 S 01:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089655 3066842 otterfencing 148948 5.7 S 01:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089717 3066651 otterfencing 148848 5.6 S 01:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089645 3066442 otterfencing 148408 4.6 S 01:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089684 3067029 otterfencing 148380 4.9 S 01:13 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089977 3929444 madalice 147116 9.2 R 00:10 php-fpm: pool madalice_com_au 3089607 3066642 otterfencing 139008 5.1 R 01:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089663 3067480 otterfencing 137608 4.8 R 01:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089634 3066563 otterfencing 137300 5.1 R 01:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3088928 3066851 corpkicks 136008 4.8 R 01:51 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 508924 1 netdata 135812 2.0 Rsl 5-11:15:25 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3089738 3066707 otterfencing 134796 5.3 R 01:12 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089665 3066641 otterfencing 133824 5.8 R 01:15 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089860 3066713 otterfencing 133384 5.8 R 01:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089597 3067389 otterfencing 132332 5.7 R 01:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089477 3066826 otterfencing 130624 4.6 R 01:24 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089801 3066550 otterfencing 129292 5.2 R 01:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089846 3066717 otterfencing 128948 4.2 R 01:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089314 3066821 otterfencing 128780 5.1 R 01:28 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3077683 3929444 madalice 128180 5.1 R 03:49 php-fpm: pool madalice_com_au 3089820 3066813 otterfencing 122632 5.3 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089739 3066257 otterfencing 122512 5.1 R 01:11 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089125 3051811 otterfencing 122484 4.0 R 01:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089160 3066805 otterfencing 121208 3.5 R 01:37 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089754 3051817 otterfencing 120412 5.9 R 01:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089726 3066544 otterfencing 118100 4.8 S 01:12 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089009 3066244 otterfencing 115388 4.3 R 01:46 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089742 3066441 otterfencing 111576 4.5 R 01:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089010 3066710 otterfencing 106480 4.2 R 01:46 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089769 3066612 otterfencing 106424 6.5 R 01:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089807 3066718 otterfencing 106340 4.8 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089817 3067176 otterfencing 100452 5.5 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089725 3066476 otterfencing 97312 3.5 R 01:12 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 706071 655564 root 91972 0.0 S 10:57:06 spamd child 3089804 3067483 otterfencing 87000 3.8 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089116 3067478 otterfencing 85300 3.9 R 01:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2900038 655564 root 80012 0.0 S 53:02 spamd child 3089806 3066623 otterfencing 78364 5.8 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089845 3067104 otterfencing 77168 5.3 R 01:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089818 3067390 otterfencing 75180 4.6 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090116 3066540 evolution 66844 6.0 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089819 3066825 otterfencing 66428 4.5 R 01:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090097 3066814 evolution 66096 4.4 R 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090115 3066643 evolution 43764 5.7 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090088 3048964 evolution 43564 1.2 S 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090122 3066657 evolution 43104 1.0 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090110 3066432 evolution 42976 1.0 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090318 3066822 evolution 42824 12.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3090104 3049586 evolution 41060 0.6 S 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 3077683 D - php-fpm: pool madalice_com_au 3088928 D - /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3089009 D - /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089116 D - /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089125 D - /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3089295 D - php-fpm: pool madalice_com_au 3090257 D - /usr/sbin/httpd -k start 3090288 D - /usr/sbin/httpd -k start 3090309 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +-------+----------------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-------+----------------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9394 | lecsafec_evo | lecsafec_icatv2 | Execute | 329 | Sending data | update assets,results set results.asset_id=assets.id WHERE assets.uploadid='39206' AND results.uploadid=assets.uploadid AND assets.assetkey=results.assetkey AND assets.jobid=results.jobid | | 20446 | root | 85-1559715131 | Execute | 108 | Sending data | SELECT SQL_CALC_FOUND_ROWS purchases.*, DATE_FORMAT(FROM_UNIXTIME(purchases.emailed), '%d-%m-%Y') as emailDate, contacts.company,contacts.firstname,contacts.lastname send_status, date_sent from purchases LEFT JOIN contacts ON contacts.clientid=purchases.supplierid LEFT JOIN staff ON staff.i | | 22903 | root | 108-1481181613 | Execute | 1 | Sending data | SELECT * FROM notifications WHERE staffid='277' ORDER by ID DESC LIMIT 20 | | 22978 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 22977 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-------+----------------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min otterfencing/otterfencing.com.au-ssl_log 172 evolution/my.evolutionerp.com.au-ssl_log 139 evolution/app.evolutionerp.com.au-ssl_log 66 evolution/portal.evolutionerp.com.au-ssl_log 55 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 193 35.221.22.116 143 203.54.180.238 66 40.115.94.245 28 103.104.165.99 15 101.182.108.127 8 182.239.240.254 7 103.104.164.114 3 180.181.236.49 3 147.161.213.78 1 62.60.130.199 1 52.167.144.167 1 40.77.167.61 1 34.171.140.179 1 2a03:2880:f802:4a:: 1 168.107.89.182 --- top request paths across all vhosts (last 3 min) --- 95 POST /functions.php 32 GET /api/getItem/LWPB2001KG 23 GET /heartbeat.php 17 GET /app/ajax.php 13 GET /factory_session_checker.php 12 GET /index.php 8 GET /factory_session_processed_qty.php 8 GET /factory_session_joiner.php 6 POST /plugins/csvexporter/plugin.php 6 POST /app/ajax.php 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax/selectFilter.php 2 POST /logsave.php 2 POST //functions.php 2 POST /clienteditsave.php 2 GET /api/getItem/RHSG15050208 2 GET /api/getItem/RHSG1257530 1 POST /wp-login.php 1 POST /portal/register 1 POST /plugins/fencecosting/plugin.php --- busiest 3 vhosts: top paths + last 10 requests --- == otterfencing/otterfencing.com.au-ssl_log == -- top paths -- 1 GET /sql2026.zip 1 GET /sql2026.tar.gz 1 GET /sql_2026.tar.gz 1 GET /sql2026.sql.gz 1 GET /sql_2026.sql.gz 1 GET /sql2026.sql 1 GET /sql_2026.sql 1 GET /sql202609.zip 1 GET /sql2026-09.zip 1 GET /sql_202609.zip 1 GET /sql_2026-09.zip 1 GET /sql202609.tar.gz -- last 10 requests -- 35.221.22.116 - - [02/Sep/2026:13:33:53 +1000] "GET /sql_202607.sql.gz HTTP/1.1" 404 56743 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:33:55 +1000] "GET /sql202607.sql HTTP/1.1" 404 56734 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:33:45 +1000] "GET /sql_2026-09.zip HTTP/1.1" 404 56736 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:34:02 +1000] "GET /sql202605.tar.gz HTTP/1.1" 404 56741 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:34:00 +1000] "GET /sql2026-06.zip HTTP/1.1" 404 56737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:34:00 +1000] "GET /sql_202606.tar.gz HTTP/1.1" 404 56743 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:34:00 +1000] "GET /sql_2026-06.tar.gz HTTP/1.1" 404 56745 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:33:56 +1000] "GET /sql2026-07.tar.gz HTTP/1.1" 404 56742 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:34:01 +1000] "GET /sql_2026-06.sql.gz HTTP/1.1" 404 56745 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.221.22.116 - - [02/Sep/2026:13:33:52 +1000] "GET /sql202607.zip HTTP/1.1" 404 56735 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 96 POST /functions.php 18 GET /app/ajax.php 11 GET /index.php 6 POST /plugins/csvexporter/plugin.php 6 POST /app/ajax.php 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax/selectFilter.php 2 POST /logsave.php 2 POST //functions.php 2 POST /clienteditsave.php 1 POST /plugins/fencecosting/plugin.php 1 POST /opportunityeditsave.php -- last 10 requests -- 103.104.164.114 - - [02/Sep/2026:13:34:59 +1000] "GET /index.php HTTP/1.1" 200 25098 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152 103.104.165.99 - - [02/Sep/2026:13:34:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 8765 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=5344" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 203.54.180.238 - - [02/Sep/2026:13:35:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=plugins&id=23&action=setting" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.164.114 - - [02/Sep/2026:13:35:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [02/Sep/2026:13:35:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29280&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [02/Sep/2026:13:35:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/ 103.104.165.99 - - [02/Sep/2026:13:35:08 +1000] "GET / HTTP/1.1" 200 5357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 147.161.213.78 - - [02/Sep/2026:13:35:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=fsinstruction&id=19289" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 103.104.165.99 - - [02/Sep/2026:13:35:01 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 8765 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=5344" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 103.104.165.99 - - [02/Sep/2026:13:35:00 +1000] "GET /app/ajax.php?cn=tsExportSettingstimesheet&furi=false&uri=%2F&call=getUserSetting&caller=ajaxSubmitLocal&seq=11200144438 HTTP/1.1" 200 102 "https://my.evolutionerp.com == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 32 GET /api/getItem/LWPB2001KG 2 GET /api/getItem/RHSG15050208 2 GET /api/getItem/RHSG1257530 1 GET /api/getItem/RHSP7550608 1 GET /api/getItem/RHSP12575608 1 GET /api/getItem/RHSG7550508 1 GET /api/getItem/RHSG7550408 1 GET /api/getItem/RHSG7550308 1 GET /api/getItem/RHSG7550258 1 GET /api/getItem/RHSG755020 1 GET /api/getItem/RHSG7550168 1 GET /api/getItem/RHSG7525258 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:13:33:35 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:33:35 +1000] "GET /api/getItem/RHSP12575608 HTTP/1.1" 404 114 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:33:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:33:37 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:33:38 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:33:36 +1000] "GET /api/getItem/RHSG15050208 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:35:00 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:35:01 +1000] "GET /api/getItem/RHSG15050208 HTTP/1.1" 200 2045 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:35:03 +1000] "GET /api/getItem/RHSG15050258 HTTP/1.1" 404 114 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:13:35:03 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-02 13:31:10 L1=128.66 run=137 blk=3 avail=1330 (9.7%) swpO=1161 conn=108 myRSS=627 php=131 phpRSS=12912 ap=158 tcp=407 topuser=otterfencing 2026-09-02 13:31:20 L1=129.89 run=141 blk=3 avail=1047 (7.6%) swpO=2011 conn=108 myRSS=629 php=132 phpRSS=13130 ap=155 tcp=415 topuser=otterfencing 2026-09-02 13:31:21 L1=129.89 run=136 blk=0 avail=1622 (11.8%) swpO=1644 conn=107 myRSS=628 php=127 phpRSS=12549 ap=157 tcp=409 topuser=otterfencing 2026-09-02 13:31:30 L1=130.52 run=129 blk=2 avail=1103 (8.0%) swpO=861 conn=110 myRSS=615 php=135 phpRSS=13032 ap=155 tcp=415 topuser=otterfencing 2026-09-02 13:31:31 L1=130.52 run=132 blk=1 avail=1131 (8.2%) swpO=750 conn=108 myRSS=615 php=128 phpRSS=12979 ap=162 tcp=416 topuser=otterfencing 2026-09-02 13:31:42 L1=130.37 run=150 blk=4 avail=748 (5.4%) swpO=4415 conn=109 myRSS=586 php=134 phpRSS=13585 ap=163 tcp=413 topuser=otterfencing 2026-09-02 13:31:53 L1=132.23 run=86 blk=62 avail=820 (6.0%) swpO=29782 conn=102 myRSS=541 php=118 phpRSS=13023 ap=170 tcp=406 topuser=otterfencing 2026-09-02 13:31:51 L1=132.23 run=83 blk=51 avail=467 (3.4%) swpO=17385 conn=102 myRSS=541 php=126 phpRSS=13751 ap=167 tcp=404 topuser=otterfencing 2026-09-02 13:32:03 L1=131.81 run=118 blk=1 avail=3542 (25.7%) swpO=1811 conn=85 myRSS=544 php=116 phpRSS=10271 ap=158 tcp=419 topuser=otterfencing 2026-09-02 13:32:04 L1=131.81 run=124 blk=1 avail=3421 (24.8%) swpO=2245 conn=87 myRSS=544 php=115 phpRSS=10355 ap=160 tcp=423 topuser=otterfencing 2026-09-02 13:32:14 L1=130.45 run=122 blk=0 avail=2045 (14.8%) swpO=0 conn=101 myRSS=547 php=126 phpRSS=12019 ap=154 tcp=412 topuser=otterfencing 2026-09-02 13:32:14 L1=130.45 run=122 blk=1 avail=1921 (13.9%) swpO=0 conn=103 myRSS=547 php=126 phpRSS=12143 ap=153 tcp=412 topuser=otterfencing 2026-09-02 13:32:24 L1=129.72 run=120 blk=0 avail=1753 (12.7%) swpO=0 conn=105 myRSS=551 php=126 phpRSS=12104 ap=154 tcp=412 topuser=otterfencing 2026-09-02 13:32:25 L1=129.72 run=120 blk=0 avail=1777 (12.9%) swpO=0 conn=106 myRSS=551 php=124 phpRSS=12187 ap=155 tcp=413 topuser=otterfencing 2026-09-02 13:32:35 L1=129.64 run=131 blk=5 avail=1629 (11.8%) swpO=486 conn=103 myRSS=616 php=133 phpRSS=12864 ap=160 tcp=265 topuser=otterfencing 2026-09-02 13:32:35 L1=129.64 run=133 blk=0 avail=1607 (11.7%) swpO=535 conn=101 myRSS=618 php=133 phpRSS=12680 ap=158 tcp=364 topuser=otterfencing 2026-09-02 13:32:46 L1=130.23 run=131 blk=0 avail=1590 (11.5%) swpO=576 conn=103 myRSS=637 php=132 phpRSS=12603 ap=162 tcp=426 topuser=otterfencing 2026-09-02 13:32:56 L1=129.88 run=122 blk=0 avail=1857 (13.5%) swpO=114 conn=98 myRSS=683 php=131 phpRSS=12401 ap=159 tcp=418 topuser=otterfencing 2026-09-02 13:32:57 L1=129.88 run=121 blk=2 avail=1552 (11.3%) swpO=340 conn=96 myRSS=685 php=132 phpRSS=12523 ap=159 tcp=423 topuser=otterfencing 2026-09-02 13:33:07 L1=129.15 run=132 blk=0 avail=1417 (10.3%) swpO=450 conn=107 myRSS=713 php=140 phpRSS=12919 ap=157 tcp=415 topuser=otterfencing 2026-09-02 13:33:08 L1=129.15 run=137 blk=1 avail=1104 (8.0%) swpO=2493 conn=108 myRSS=700 php=140 phpRSS=13188 ap=155 tcp=411 topuser=otterfencing 2026-09-02 13:33:17 L1=129.99 run=133 blk=2 avail=2062 (15.0%) swpO=2260 conn=98 myRSS=726 php=130 phpRSS=11641 ap=156 tcp=408 topuser=otterfencing 2026-09-02 13:33:19 L1=129.27 run=129 blk=1 avail=1551 (11.3%) swpO=12 conn=101 myRSS=726 php=136 phpRSS=12400 ap=157 tcp=408 topuser=otterfencing 2026-09-02 13:33:28 L1=129.41 run=124 blk=2 avail=1071 (7.8%) swpO=2887 conn=106 myRSS=694 php=134 phpRSS=13032 ap=154 tcp=402 topuser=otterfencing 2026-09-02 13:33:29 L1=128.98 run=129 blk=1 avail=1480 (10.7%) swpO=3175 conn=99 myRSS=694 php=131 phpRSS=12179 ap=155 tcp=404 topuser=otterfencing 2026-09-02 13:33:38 L1=128.31 run=126 blk=0 avail=1402 (10.2%) swpO=0 conn=105 myRSS=698 php=134 phpRSS=12435 ap=155 tcp=392 topuser=otterfencing 2026-09-02 13:33:40 L1=128.31 run=131 blk=0 avail=1505 (10.9%) swpO=0 conn=106 myRSS=705 php=134 phpRSS=12539 ap=157 tcp=395 topuser=otterfencing 2026-09-02 13:33:51 L1=128.27 run=125 blk=4 avail=718 (5.2%) swpO=5530 conn=107 myRSS=665 php=135 phpRSS=13376 ap=162 tcp=385 topuser=otterfencing 2026-09-02 13:34:02 L1=128.04 run=55 blk=4 avail=142 (1.0%) swpO=21589 conn=106 myRSS=641 php=141 phpRSS=9419 ap=157 tcp=147 topuser=otterfencing 2026-09-02 13:35:04 L1=151.72 run=69 blk=2 avail=4616 (33.5%) swpO=457 conn=58 myRSS=610 php=75 phpRSS=7248 ap=159 tcp=156 topuser=otterfencing