INCIDENT 2026-09-02 18:43:02 trigger: php_rss=1523MB ================================================================== load: 1.49 1.37 1.18 2/593 4185575 ncpu:10 mem_avail: 8460MB/13777MB (61.4%) swap_used:1319MB swapout:0/s blocked(D):0 running:4 iowait:0.1% steal:0.0% php: 12 procs / 1523MB heaviest user: madalice (9 procs, 1335MB) apache: 16 procs tcp_estab: 21 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2189 madalice 9 1335 root 245 586 nobody 15 236 netdata 7 199 corpkicks 1 191 cpanellogin 1 66 mailman 20 36 dovenull 6 26 zabbix 1 18 wp-toolkit 3 18 mailnull 2 9 dovecot 3 9 named 1 6 nscd 1 4 kurri 1 4 polkitd 1 3 evolution 8 3 dbus 1 3 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1335 corpkicks 1 193 root 1 2 evolution 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7156 MB Active(file): 5238 MB Inactive(file): 2420 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 478 MB CommitLimit: 10984 MB Committed_AS: 7836 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-16:20:34 7760 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2242044 16.9 Ssl 04:28:49 /usr/sbin/mariadbd 4185518 4184159 corpkicks 208304 85.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 508924 1 netdata 183744 2.0 Ssl 5-16:23:23 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 172908 0.0 S 16:05:04 spamd child 4185354 3929444 madalice 159600 8.8 S 00:29 php-fpm: pool madalice_com_au 4185355 3929444 madalice 159572 8.8 S 00:29 php-fpm: pool madalice_com_au 4185353 3929444 madalice 159520 8.8 S 00:29 php-fpm: pool madalice_com_au 4185351 3929444 madalice 159452 8.9 S 00:29 php-fpm: pool madalice_com_au 4185350 3929444 madalice 159412 8.6 S 00:29 php-fpm: pool madalice_com_au 4185352 3929444 madalice 159244 8.2 S 00:29 php-fpm: pool madalice_com_au 2900038 655564 root 139156 0.0 S 06:01:00 spamd child 4185357 3929444 madalice 136876 4.6 S 00:29 php-fpm: pool madalice_com_au 4185362 3929444 madalice 136816 4.5 S 00:28 php-fpm: pool madalice_com_au 4185361 3929444 madalice 136812 4.7 S 00:28 php-fpm: pool madalice_com_au 3897570 1353308 cpanellogin 68524 0.0 S 01:26:33 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 509236 509098 root 45792 0.0 Sl 5-16:23:20 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42056 0.1 Ss 42-16:01:46 cpsrvd (SSL) - waiting for connections 509266 1 root 28992 0.0 Ss 5-16:23:20 /usr/lib/systemd/systemd-journald 4167377 506832 nobody 21576 0.0 S 07:16 /usr/sbin/httpd -k start 4184178 506832 nobody 20872 0.0 S 02:33 /usr/sbin/httpd -k start 4167830 506832 nobody 20700 0.1 S 06:22 /usr/sbin/httpd -k start 4167379 506832 nobody 19300 0.1 S 07:16 /usr/sbin/httpd -k start 483898 1 zabbix 18800 0.2 Ssl 5-16:24:37 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 4184159 506832 nobody 18796 0.0 S 02:35 /usr/sbin/httpd -k start 509671 508992 netdata 18156 2.1 Sl 5-16:23:18 /usr/libexec/netdata/plugins.d/apps.plugin 1 4185366 506832 nobody 17888 0.0 S 00:27 /usr/sbin/httpd -k start 4185363 506832 nobody 17804 0.0 S 00:27 /usr/sbin/httpd -k start 4185373 506832 nobody 17788 0.0 S 00:26 /usr/sbin/httpd -k start 4185359 506832 nobody 17728 0.0 S 00:28 /usr/sbin/httpd -k start 4185365 506832 nobody 17492 0.0 S 00:27 /usr/sbin/httpd -k start 4185367 506832 nobody 16716 0.0 S 00:26 /usr/sbin/httpd -k start 4185374 506832 nobody 16108 0.0 S 00:26 /usr/sbin/httpd -k start 4185371 506832 nobody 15672 0.0 S 00:26 /usr/sbin/httpd -k start 1469 1 root 14716 0.1 Ss 65-08:33:15 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1463 1 root 13852 0.0 Ss 65-08:33:15 tailwatchd 654927 1 root 12708 0.0 Ss 16:20:11 lfd - sleeping 4168227 508511 root 11220 0.0 S 05:25 dovecot/auth -w 654163 1 root 11036 0.0 Ss 16:20:37 queueprocd - waiting up to 60s to process a task 1166814 1471 root 10132 0.0 S 13:55:02 cPhulkd - dbprocessor 4185482 1471 root 10112 0.0 S 00:10 cPhulkd - processor - http socket 655564 1 root 9880 0.0 Ss 16:19:40 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3929420 1 wp-toolkit 9060 0.0 Ss 1-16:20:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2186897 508511 dovenull 8588 0.0 S 09:10:08 dovecot/imap-login 3926885 1 root 7760 0.0 Ssl 1-16:20:34 /usr/bin/imunify-agent-proxy 1466 1 root 7700 0.0 Ss 65-08:33:15 dnsadmin - dormant mode 2186893 508511 dovenull 7620 0.0 S 09:10:08 dovecot/imap-login 4185486 508720 mailnull 7324 0.0 S 00:07 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 3929564 1 wp-toolkit 7240 0.0 Ss 1-16:20:24 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 508634 1 named 6828 0.0 Ssl 5-16:23:28 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1 0 root 6800 0.1 Ss 65-08:33:24 /usr/lib/systemd/systemd --system --deserialize 24 1471 1 root 6000 0.0 Ss 65-08:33:15 cPhulkd - processor 2186895 508511 dovenull 5888 0.0 S 09:10:08 dovecot/pop3-login 2186903 508511 dovecot 5496 0.0 S 09:10:08 dovecot/auth 2186899 508511 dovenull 5240 0.0 S 09:10:08 dovecot/pop3-login 4185610 3409584 root 4368 0.0 R 00:00 ps -eo pid,ppid,user:20,rss,pcpu,stat,etime,args --sort=-rss 2188868 508511 kurri 4336 0.0 S 09:08:08 dovecot/imap 654450 1 nscd 4320 0.1 Ssl 16:20:23 /usr/sbin/nscd 506832 1 root 4308 0.0 Ss 5-16:23:53 /usr/sbin/httpd -k start 654700 654679 mailman 4292 0.0 S 16:20:20 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 654689 654679 mailman 4116 0.0 S 16:20:20 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1032351 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 92 madalice/madalice.com.au-ssl_log 30 evolution/portal.evolutionerp.com.au-ssl_log 12 otterfencing/otterfencing.com.au-ssl_log 10 nrg/nrgservices.net.au-ssl_log 9 tubesupplies/tubesupplies.com.au-ssl_log 4 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 92 40.115.94.245 20 34.86.48.238 12 203.54.180.238 9 20.48.179.39 9 118.127.40.55 5 162.220.232.48 4 62.60.130.199 1 64.225.1.35 1 114.119.159.70 1 114.119.146.16 1 114.119.143.14 1 114.119.140.234 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 82 GET /api/getItem/LWPB2001KG 12 GET /heartbeat.php 10 GET /api/getItem/LWHG2001KG 4 POST /wp-cron.php 4 GET /wp-admin/admin-ajax.php 3 GET /store/kids-hand-painted-af1-shoes/ 3 GET / 2 GET /wp-includes/Text/Diff/ 2 GET /wp-content/themes/index.php 2 GET /store/kids-swarovski-blinged-diamond-kicks/ 1 POST /wp-admin/admin-ajax.php 1 GET //xmlrpc.php 1 GET //wp/wp-includes/wlwmanifest.xml 1 GET /wp-manager.php 1 GET //wp-includes/wlwmanifest.xml 1 GET /wp-includes/Text/Diff/Engine/about.php 1 GET /wp-includes/Text/Diff/Engine/ 1 GET /wp-includes/Text/ 1 GET /wp-includes/l10n/ 1 GET /wp-includes/js/jquery/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 82 GET /api/getItem/LWPB2001KG 10 GET /api/getItem/LWHG2001KG -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:18:42:16 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:17 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:17 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:19 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:19 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:19 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:18:42:20 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/kids-hand-painted-af1-shoes/ 2 GET /store/kids-swarovski-blinged-diamond-kicks/ 2 GET / 1 GET //xmlrpc.php 1 GET //wp/wp-includes/wlwmanifest.xml 1 GET //wp-includes/wlwmanifest.xml 1 GET //wp2/wp-includes/wlwmanifest.xml 1 GET //wp1/wp-includes/wlwmanifest.xml 1 GET //wordpress/wp-includes/wlwmanifest.xml 1 GET //web/wp-includes/wlwmanifest.xml 1 GET //website/wp-includes/wlwmanifest.xml 1 GET //test/wp-includes/wlwmanifest.xml -- last 10 requests -- 34.86.48.238 - - [02/Sep/2026:18:41:40 +1000] "GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1" 200 273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537 34.86.48.238 - - [02/Sep/2026:18:41:40 +1000] "GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1" 200 273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53 114.119.130.40 - - [02/Sep/2026:18:41:48 +1000] "GET /store/kids-hand-painted-af1-shoes/?rating=3&image=1&wcpr_rating=1&wcpr_verified=1 HTTP/1.1" 404 36667 "https://madalice.com.au/store/kids-hand-painted-af1-shoes/?rati 114.119.140.234 - - [02/Sep/2026:18:42:09 +1000] "GET /store/kids-hand-painted-af1-shoes/?amp%3Bwcpr_rating=4&verified=1&wcpr_image=1&wcpr_rating=3 HTTP/1.1" 404 36668 "https://madalice.com.au/store/kids-hand-painted-af1 114.119.143.14 - - [02/Sep/2026:18:42:31 +1000] "GET /store/kids-hand-painted-af1-shoes/?amp%3Bwcpr_rating=2&image=1&rating=2&wcpr_rating=5 HTTP/1.1" 404 36663 "https://madalice.com.au/store/kids-hand-painted-af1-shoes/? 162.220.232.48 - - [02/Sep/2026:18:42:33 +1000] "GET /contact HTTP/1.1" 301 1 "http://madalice.com.au/contact" "Mozilla/5.0" 162.220.232.48 - - [02/Sep/2026:18:42:33 +1000] "GET /pages/contacts HTTP/1.1" 404 36649 "http://madalice.com.au/pages/contacts" "Mozilla/5.0" 162.220.232.48 - - [02/Sep/2026:18:42:33 +1000] "GET /contact.php HTTP/1.1" 404 36646 "http://madalice.com.au/contact.php" "Mozilla/5.0" 162.220.232.48 - - [02/Sep/2026:18:42:33 +1000] "GET /contact-us HTTP/1.1" 404 36646 "http://madalice.com.au/contact-us" "Mozilla/5.0" 162.220.232.48 - - [02/Sep/2026:18:42:33 +1000] "GET /contactus.php HTTP/1.1" 404 36647 "http://madalice.com.au/contactus.php" "Mozilla/5.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 12 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:18:41:12 +1000] "GET /heartbeat.php?sentAt=1788338473&bytes=106,151,225,41&_=1788324351171 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:14 +1000] "GET /heartbeat.php?sentAt=1788338474&bytes=106,151,225,42&_=1788325210785 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:22 +1000] "GET /heartbeat.php?sentAt=1788338483&bytes=106,151,225,51&_=1788324351172 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:24 +1000] "GET /heartbeat.php?sentAt=1788338484&bytes=106,151,225,52&_=1788325210786 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:32 +1000] "GET /heartbeat.php?sentAt=1788338493&bytes=106,151,225,61&_=1788324351173 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:34 +1000] "GET /heartbeat.php?sentAt=1788338494&bytes=106,151,225,62&_=1788325210787 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:42 +1000] "GET /heartbeat.php?sentAt=1788338503&bytes=106,151,225,71&_=1788324351174 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:44 +1000] "GET /heartbeat.php?sentAt=1788338504&bytes=106,151,225,72&_=1788325210788 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:52 +1000] "GET /heartbeat.php?sentAt=1788338513&bytes=106,151,225,81&_=1788324351175 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:18:41:54 +1000] "GET /heartbeat.php?sentAt=1788338514&bytes=106,151,225,82&_=1788325210789 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-02 18:40:42 L1=1.83 run=3 blk=0 avail=9431 (68.5%) swpO=0 conn=3 myRSS=2186 php=4 phpRSS=383 ap=19 tcp=20 topuser=otterfencing 2026-09-02 18:40:42 L1=1.83 run=4 blk=0 avail=9432 (68.5%) swpO=0 conn=3 myRSS=2186 php=4 phpRSS=383 ap=19 tcp=20 topuser=otterfencing 2026-09-02 18:40:52 L1=1.79 run=2 blk=0 avail=9560 (69.4%) swpO=0 conn=3 myRSS=2187 php=3 phpRSS=225 ap=17 tcp=23 topuser=otterfencing 2026-09-02 18:40:52 L1=1.79 run=3 blk=0 avail=9560 (69.4%) swpO=0 conn=3 myRSS=2187 php=3 phpRSS=225 ap=17 tcp=23 topuser=otterfencing 2026-09-02 18:41:02 L1=1.74 run=5 blk=0 avail=9394 (68.2%) swpO=0 conn=3 myRSS=2187 php=5 phpRSS=451 ap=17 tcp=21 topuser=otterfencing 2026-09-02 18:41:02 L1=1.74 run=4 blk=0 avail=9393 (68.2%) swpO=0 conn=3 myRSS=2187 php=5 phpRSS=455 ap=17 tcp=21 topuser=otterfencing 2026-09-02 18:41:12 L1=1.86 run=2 blk=0 avail=9274 (67.3%) swpO=0 conn=3 myRSS=2189 php=5 phpRSS=559 ap=18 tcp=21 topuser=otterfencing 2026-09-02 18:41:12 L1=1.86 run=3 blk=0 avail=9273 (67.3%) swpO=0 conn=3 myRSS=2189 php=5 phpRSS=559 ap=18 tcp=21 topuser=otterfencing 2026-09-02 18:41:22 L1=1.73 run=3 blk=0 avail=9428 (68.4%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=382 ap=17 tcp=18 topuser=otterfencing 2026-09-02 18:41:22 L1=1.73 run=3 blk=0 avail=9429 (68.4%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=382 ap=17 tcp=18 topuser=otterfencing 2026-09-02 18:41:32 L1=1.69 run=2 blk=0 avail=9449 (68.6%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=358 ap=17 tcp=19 topuser=otterfencing 2026-09-02 18:41:32 L1=1.69 run=3 blk=0 avail=9449 (68.6%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=358 ap=17 tcp=19 topuser=otterfencing 2026-09-02 18:41:42 L1=1.58 run=2 blk=0 avail=9537 (69.2%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=274 ap=17 tcp=16 topuser=otterfencing 2026-09-02 18:41:42 L1=1.58 run=3 blk=0 avail=9534 (69.2%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=278 ap=17 tcp=16 topuser=otterfencing 2026-09-02 18:41:52 L1=1.65 run=2 blk=0 avail=9427 (68.4%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=384 ap=16 tcp=19 topuser=otterfencing 2026-09-02 18:41:52 L1=1.65 run=4 blk=0 avail=9426 (68.4%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=384 ap=16 tcp=19 topuser=otterfencing 2026-09-02 18:42:02 L1=1.79 run=2 blk=0 avail=9434 (68.5%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=382 ap=16 tcp=19 topuser=otterfencing 2026-09-02 18:42:02 L1=1.79 run=3 blk=0 avail=9434 (68.5%) swpO=0 conn=3 myRSS=2189 php=4 phpRSS=382 ap=16 tcp=20 topuser=otterfencing 2026-09-02 18:42:12 L1=1.83 run=2 blk=0 avail=9430 (68.4%) swpO=0 conn=2 myRSS=2189 php=4 phpRSS=385 ap=16 tcp=21 topuser=otterfencing 2026-09-02 18:42:12 L1=1.83 run=4 blk=0 avail=9429 (68.4%) swpO=0 conn=2 myRSS=2189 php=4 phpRSS=385 ap=16 tcp=21 topuser=otterfencing 2026-09-02 18:42:22 L1=2.09 run=2 blk=0 avail=9280 (67.4%) swpO=0 conn=2 myRSS=2189 php=5 phpRSS=565 ap=16 tcp=19 topuser=otterfencing 2026-09-02 18:42:22 L1=2.09 run=3 blk=0 avail=9280 (67.4%) swpO=0 conn=2 myRSS=2189 php=5 phpRSS=565 ap=16 tcp=19 topuser=otterfencing 2026-09-02 18:42:32 L1=2.00 run=2 blk=0 avail=9429 (68.4%) swpO=0 conn=2 myRSS=2189 php=4 phpRSS=388 ap=15 tcp=20 topuser=otterfencing 2026-09-02 18:42:32 L1=2.00 run=3 blk=0 avail=9428 (68.4%) swpO=0 conn=2 myRSS=2189 php=4 phpRSS=388 ap=15 tcp=20 topuser=otterfencing 2026-09-02 18:42:42 L1=1.70 run=1 blk=0 avail=8402 (61.0%) swpO=0 conn=2 myRSS=2189 php=12 phpRSS=1475 ap=29 tcp=20 topuser=madalice 2026-09-02 18:42:42 L1=1.70 run=2 blk=0 avail=8402 (61.0%) swpO=0 conn=2 myRSS=2189 php=12 phpRSS=1475 ap=29 tcp=20 topuser=madalice 2026-09-02 18:42:52 L1=1.66 run=2 blk=0 avail=8485 (61.6%) swpO=0 conn=2 myRSS=2189 php=12 phpRSS=1475 ap=19 tcp=18 topuser=madalice 2026-09-02 18:42:52 L1=1.66 run=2 blk=0 avail=8485 (61.6%) swpO=0 conn=2 myRSS=2189 php=12 phpRSS=1475 ap=19 tcp=18 topuser=madalice 2026-09-02 18:43:02 L1=1.49 run=4 blk=0 avail=8460 (61.4%) swpO=0 conn=3 myRSS=2189 php=12 phpRSS=1523 ap=16 tcp=21 topuser=madalice 2026-09-02 18:43:02 L1=1.49 run=4 blk=0 avail=8461 (61.4%) swpO=0 conn=3 myRSS=2189 php=12 phpRSS=1522 ap=16 tcp=21 topuser=madalice