INCIDENT 2026-09-02 20:22:03 trigger: load=120.75/10cpu php_procs=50 php_rss=5236MB mysql_conn=37 ================================================================== load: 120.75 101.71 46.57 45/838 315132 ncpu:10 mem_avail: 6281MB/13777MB (45.6%) swap_used:2819MB swapout:0/s blocked(D):0 running:46 iowait:0.2% steal:0.0% php: 50 procs / 5236MB heaviest user: customc (40 procs, 4411MB) apache: 155 procs tcp_estab: 297 --- RSS by user (all processes) --- USER PROCS RSS_MB customc 40 4421 mysql 1 1467 nobody 152 1217 madalice 8 823 root 256 275 netdata 7 145 infinium 2 63 vinesit 2 24 mailman 20 21 cpanellogin 1 17 dovenull 6 12 zabbix 1 9 wp-toolkit 3 9 aaa 1 9 evolution 11 6 dovecot 3 6 cpanelphpmyadmin 1 5 mailnull 2 4 cpanelconnecttrack 1 2 named 1 1 --- php workers by user --- USER PROCS RSS_MB customc 40 4503 madalice 8 823 root 1 2 evolution 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 822 MB Active(file): 571 MB Inactive(file): 363 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 176 MB CommitLimit: 10984 MB Committed_AS: 14053 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 243603 root 22:02 96 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 1-17:59:35 1960 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 1502632 14.5 Ssl 06:07:50 /usr/sbin/mariadbd 314453 309318 customc 188924 20.4 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314173 309385 customc 188388 26.5 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314622 310034 customc 188196 27.0 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314176 309303 customc 187364 18.1 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 313926 309758 customc 186752 17.7 R 00:08 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314439 308943 customc 182824 25.4 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314740 309308 customc 172076 38.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314532 309234 customc 170596 29.2 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314536 309301 customc 163504 28.7 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314594 309542 customc 162532 26.2 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314441 308666 customc 159320 22.8 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 309760 3929444 madalice 158160 8.1 S 00:46 php-fpm: pool madalice_com_au 314595 309274 customc 153324 26.2 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314685 308173 customc 148440 23.6 S 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314229 308927 customc 143676 18.6 S 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314602 308751 customc 143004 17.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314581 308274 customc 138920 15.7 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 309839 3929444 madalice 137732 4.7 S 00:43 php-fpm: pool madalice_com_au 314659 309226 customc 135752 28.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 309844 3929444 madalice 135692 4.9 S 00:43 php-fpm: pool madalice_com_au 309472 3929444 madalice 135476 4.4 S 01:24 php-fpm: pool madalice_com_au 309351 3929444 madalice 134320 4.0 S 03:10 php-fpm: pool madalice_com_au 314591 309437 customc 131648 17.0 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 508924 1 netdata 129544 2.0 Ssl 5-18:02:24 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 314789 309307 customc 127008 38.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314948 309530 customc 126508 51.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314739 309267 customc 119232 24.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314839 309420 customc 115060 27.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314741 308617 customc 113200 15.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314771 309223 customc 110852 30.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314702 309277 customc 107208 18.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314718 308605 customc 101828 23.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314713 309798 customc 97820 16.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314694 309799 customc 95292 20.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314827 309314 customc 91496 17.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314950 309443 customc 91044 41.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 706071 655564 root 83848 0.0 S 17:44:05 spamd child 314987 309233 customc 82060 35.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314997 310005 customc 81480 44.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314994 309442 customc 81292 31.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314833 309296 customc 70092 11.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 315045 309776 customc 69980 20.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314697 309693 customc 69948 21.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 315115 310035 customc 59604 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 315146 309824 customc 54628 0.0 S 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314843 308834 customc 53604 14.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 315054 309545 customc 53484 12.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 315140 308903 customc 53412 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 315197 307857 customc 44524 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 311166 1353308 infinium 43820 0.5 S 00:31 webmaild - serving 1.41.252.211 509236 509098 root 25680 0.0 Sl 5-18:02:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2900038 655564 root 22096 0.0 S 07:40:01 spamd child 310805 654808 infinium 21484 0.3 S 00:34 php-fpm: pool user_infinium 309776 506832 nobody 18548 0.2 S 00:45 /usr/sbin/httpd -k start 309825 506832 nobody 18252 0.1 S 00:44 /usr/sbin/httpd -k start 509671 508992 netdata 18012 2.1 Sl 5-18:02:19 /usr/libexec/netdata/plugins.d/apps.plugin 1 309277 506832 nobody 17844 0.7 S 04:12 /usr/sbin/httpd -k start 309274 506832 nobody 17744 0.7 S 04:13 /usr/sbin/httpd -k start 309530 506832 nobody 17640 0.7 S 01:05 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------------------+------------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------------------+------------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1125631 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 1125598 | customc_wp_4eia2 | customc_wp_mjkcu | Query | 0 | Statistics | SELECT option_value FROM 11jOh6_options WHERE option_name = 'wpr-element-search' LIMIT 1 | +---------+------------------+------------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min customc/customcentral.com.au-ssl_log 214 evolution/app.evolutionerp.com.au-ssl_log 44 madalice/madalice.com.au-ssl_log 16 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 235 35.194.227.252 44 40.115.94.245 2 114.119.146.16 1 98.82.63.147 1 47.128.96.116 1 44.212.232.231 1 3.90.73.206 1 35.169.119.108 1 34.238.45.183 1 34.194.233.48 1 3.227.180.70 1 3.212.205.90 1 23.21.179.27 1 18.213.240.226 1 18.206.47.187 --- top request paths across all vhosts (last 3 min) --- 19 GET /api/getItem/LWFB2001KG 3 GET /wp-content/plugins/elementor/assets/js/packages/menus/ 2 GET /store/hand-painted-nike-af1-afl-brisbane/ 1 GET /wp-content/plugins/elementor/includes/settings/controls.php 1 GET /wp-content/plugins/elementor/includes/ 1 GET /wp-content/plugins/elementor/data/base/ 1 GET /wp-content/plugins/elementor/assets/lib/nouislider/ 1 GET /wp-content/plugins/elementor/assets/js/packages/site-builder/ 1 GET /wp-content/plugins/elementor/assets/js/packages/env/ 1 GET /wp-content/plugins/elementor/assets/js/packages/editor-styles-repository/ 1 GET /wp-content/plugins/elementor/app/ 1 GET /virtualenv.gz 1 GET /.venv.zip 1 GET /.venv.tgz 1 GET /.venv.tar.gz 1 GET /.venv.tar 1 GET /.venv.rar 1 GET /terraform.zst 1 GET /terraform.tgz 1 GET /terraform.tar.xz --- busiest 3 vhosts: top paths + last 10 requests --- == customc/customcentral.com.au-ssl_log == -- top paths -- 1 GET /virtualenv.gz 1 GET /.venv.zip 1 GET /.venv.tgz 1 GET /.venv.tar.gz 1 GET /.venv.tar 1 GET /.venv.rar 1 GET /terraform.zst 1 GET /terraform.tgz 1 GET /terraform.tar.xz 1 GET /terraform.tar.gz 1 GET /terraform.tar.bz2 1 GET /terraform.tar -- last 10 requests -- 35.194.227.252 - - [02/Sep/2026:20:21:59 +1000] "GET /log.tar.bz2 HTTP/1.1" 404 73456 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:01 +1000] "GET /access_log.tar.bz2 HTTP/1.1" 404 73463 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:01 +1000] "GET /access_log.7z HTTP/1.1" 404 73458 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:01 +1000] "GET /log.sql.bz2 HTTP/1.1" 404 73454 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:01 +1000] "GET /access_log.gz HTTP/1.1" 404 73458 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:04 +1000] "GET /error_log.sql.bz2 HTTP/1.1" 404 73462 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:02 +1000] "GET /access_log.sql HTTP/1.1" 404 73459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:02 +1000] "GET /access_log.sql.gz HTTP/1.1" 404 73462 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:05 +1000] "GET /debug.tar HTTP/1.1" 404 73454 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:22:02 +1000] "GET /error_log.tar HTTP/1.1" 404 73458 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 19 GET /api/getItem/LWFB2001KG 1 GET /api/getItem/SHSP200200608 1 GET /api/getItem/SHSP200200508 1 GET /api/getItem/SHSP150150608 1 GET /api/getItem/SHSP150150508 1 GET /api/getItem/SHSP125125608 1 GET /api/getItem/SHSP100100608 1 GET /api/getItem/SHSG125125508 1 GET /api/getItem/SHSG125125408 1 GET /api/getItem/SHSG100100508 1 GET /api/getItem/RHSG7550168 1 GET /api/getItem/RHSG7525258 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:20:21:34 +1000] "GET /api/getItem/RHSG6535308 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:35 +1000] "GET /api/getItem/RHSG6535408 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:35 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:35 +1000] "GET /api/getItem/RHSG7525168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:36 +1000] "GET /api/getItem/RHSG7525208 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:36 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:37 +1000] "GET /api/getItem/RHSG7525258 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:37 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:38 +1000] "GET /api/getItem/RHSG7550168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /wp-content/plugins/elementor/assets/js/packages/menus/ 2 GET /store/hand-painted-nike-af1-afl-brisbane/ 1 GET /wp-content/plugins/elementor/includes/settings/controls.php 1 GET /wp-content/plugins/elementor/includes/ 1 GET /wp-content/plugins/elementor/data/base/ 1 GET /wp-content/plugins/elementor/assets/lib/nouislider/ 1 GET /wp-content/plugins/elementor/assets/js/packages/site-builder/ 1 GET /wp-content/plugins/elementor/assets/js/packages/env/ 1 GET /wp-content/plugins/elementor/assets/js/packages/editor-styles-repository/ 1 GET /wp-content/plugins/elementor/app/ 1 GET /store/hand-painted-nike-af1-afl-essendon/ 1 GET /robots.txt -- last 10 requests -- 35.169.119.108 - - [02/Sep/2026:20:21:20 +1000] "GET /wp-content/plugins/elementor/includes/?C=S;O%3DD HTTP/1.1" 200 754 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://develop 3.90.73.206 - - [02/Sep/2026:20:21:21 +1000] "GET /wp-content/plugins/elementor/assets/lib/nouislider/?C=D;O%3DD HTTP/1.1" 200 328 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https 34.194.233.48 - - [02/Sep/2026:20:21:21 +1000] "GET /wp-content/plugins/elementor/assets/js/packages/menus/?C=D;O%3DA HTTP/1.1" 200 365 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; + 3.227.180.70 - - [02/Sep/2026:20:21:21 +1000] "GET /wp-content/plugins/elementor/assets/js/packages/menus/?C=M;O%3DA HTTP/1.1" 200 365 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +h 18.213.240.226 - - [02/Sep/2026:20:21:20 +1000] "GET /wp-content/plugins/elementor/includes/settings/controls.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https: 18.206.47.187 - - [02/Sep/2026:20:21:21 +1000] "GET /wp-content/plugins/elementor/app/?C=D;O%3DD HTTP/1.1" 200 352 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.ama 47.128.96.116 - - [02/Sep/2026:20:21:17 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/af1-pink-hearts/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, 114.119.146.16 - - [02/Sep/2026:20:21:20 +1000] "GET /store/hand-painted-nike-af1-afl-essendon/?amp%3Bwcpr_rating=2&wcpr_image=1&verified=1&wcpr_page=2 HTTP/1.1" 404 36675 "https://madalice.com.au/store/hand-painted-nike 114.119.146.16 - - [02/Sep/2026:20:21:30 +1000] "GET /store/hand-painted-nike-af1-afl-brisbane/?amp%3Bwcpr_rating=4&image=1&rating=5 HTTP/1.1" 404 36666 "https://madalice.com.au/store/hand-painted-nike-af1-afl-brisbane/? 114.119.143.104 - - [02/Sep/2026:20:21:52 +1000] "GET /store/hand-painted-nike-af1-afl-brisbane/?amp%3Bwcpr_rating=4&image=1&rating=2 HTTP/1.1" 404 36666 "https://madalice.com.au/store/hand-painted-nike-af1-afl-brisbane/ --- last 30 samples (run-up to this incident) --- 2026-09-02 20:15:29 L1=0.89 run=1 blk=0 avail=9380 (68.1%) swpO=0 conn=3 myRSS=2207 php=5 phpRSS=358 ap=15 tcp=21 topuser=madalice 2026-09-02 20:15:39 L1=0.75 run=1 blk=0 avail=9517 (69.1%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=14 tcp=22 topuser=madalice 2026-09-02 20:15:39 L1=0.75 run=1 blk=0 avail=9516 (69.1%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=14 tcp=22 topuser=madalice 2026-09-02 20:15:49 L1=0.63 run=2 blk=0 avail=9420 (68.4%) swpO=0 conn=2 myRSS=2207 php=5 phpRSS=283 ap=21 tcp=27 topuser=madalice 2026-09-02 20:15:49 L1=0.63 run=3 blk=1 avail=9361 (67.9%) swpO=0 conn=2 myRSS=2207 php=5 phpRSS=327 ap=21 tcp=28 topuser=madalice 2026-09-02 20:15:59 L1=0.54 run=1 blk=0 avail=9486 (68.9%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=19 tcp=24 topuser=madalice 2026-09-02 20:15:59 L1=0.54 run=1 blk=0 avail=9486 (68.9%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=19 tcp=24 topuser=madalice 2026-09-02 20:16:09 L1=0.45 run=1 blk=0 avail=9501 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:09 L1=0.45 run=1 blk=0 avail=9501 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:19 L1=0.38 run=1 blk=0 avail=9501 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:19 L1=0.38 run=1 blk=0 avail=9499 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:29 L1=4.61 run=35 blk=0 avail=6770 (49.1%) swpO=6 conn=27 myRSS=2207 php=33 phpRSS=3416 ap=46 tcp=290 topuser=customc 2026-09-02 20:16:29 L1=4.61 run=37 blk=0 avail=6737 (48.9%) swpO=6 conn=28 myRSS=2207 php=33 phpRSS=3502 ap=47 tcp=290 topuser=customc 2026-09-02 20:16:40 L1=12.10 run=64 blk=0 avail=4489 (32.6%) swpO=2283 conn=46 myRSS=2207 php=52 phpRSS=6022 ap=76 tcp=287 topuser=customc 2026-09-02 20:16:43 L1=15.53 run=78 blk=0 avail=4209 (30.6%) swpO=1793 conn=69 myRSS=2207 php=75 phpRSS=7000 ap=76 tcp=288 topuser=customc 2026-09-02 20:16:50 L1=20.86 run=91 blk=0 avail=2275 (16.5%) swpO=3894 conn=67 myRSS=2209 php=78 phpRSS=9103 ap=96 tcp=289 topuser=customc 2026-09-02 20:16:54 L1=27.68 run=94 blk=0 avail=2143 (15.6%) swpO=3540 conn=78 myRSS=2209 php=91 phpRSS=9532 ap=105 tcp=288 topuser=customc 2026-09-02 20:17:01 L1=34.35 run=107 blk=2 avail=899 (6.5%) swpO=4581 conn=89 myRSS=2200 php=97 phpRSS=10966 ap=126 tcp=293 topuser=customc 2026-09-02 20:17:05 L1=37.52 run=52 blk=61 avail=302 (2.2%) swpO=29580 conn=91 myRSS=1924 php=99 phpRSS=11930 ap=126 tcp=292 topuser=customc 2026-09-02 20:17:13 L1=44.21 run=146 blk=4 avail=117 (0.9%) swpO=54241 conn=- myRSS=1613 php=120 phpRSS=10274 ap=136 tcp=39 topuser=customc 2026-09-02 20:17:50 L1=103.52 run=177 blk=9 avail=137 (1.0%) swpO=11504 conn=91 myRSS=1613 php=123 phpRSS=10364 ap=135 tcp=38 topuser=customc 2026-09-02 20:21:05 L1=190.14 run=4 blk=98 avail=899 (6.5%) swpO=552 conn=86 myRSS=1530 php=117 phpRSS=9622 ap=144 tcp=176 topuser=customc 2026-09-02 20:21:31 L1=170.77 run=53 blk=0 avail=5698 (41.4%) swpO=2359 conn=39 myRSS=1458 php=42 phpRSS=5469 ap=153 tcp=302 topuser=customc 2026-09-02 20:21:31 L1=170.77 run=48 blk=1 avail=5809 (42.2%) swpO=836 conn=36 myRSS=1458 php=43 phpRSS=5537 ap=154 tcp=301 topuser=customc 2026-09-02 20:21:42 L1=151.45 run=52 blk=0 avail=6189 (44.9%) swpO=0 conn=40 myRSS=1465 php=50 phpRSS=5436 ap=154 tcp=303 topuser=customc 2026-09-02 20:21:42 L1=151.45 run=51 blk=1 avail=6183 (44.9%) swpO=0 conn=38 myRSS=1465 php=50 phpRSS=5479 ap=154 tcp=303 topuser=customc 2026-09-02 20:21:52 L1=135.24 run=43 blk=0 avail=6118 (44.4%) swpO=0 conn=32 myRSS=1466 php=45 phpRSS=4930 ap=153 tcp=303 topuser=customc 2026-09-02 20:21:52 L1=135.24 run=43 blk=0 avail=6113 (44.4%) swpO=0 conn=31 myRSS=1466 php=45 phpRSS=4942 ap=153 tcp=303 topuser=customc 2026-09-02 20:22:03 L1=120.75 run=46 blk=0 avail=6281 (45.6%) swpO=0 conn=37 myRSS=1467 php=50 phpRSS=5236 ap=155 tcp=297 topuser=customc 2026-09-02 20:22:03 L1=120.75 run=43 blk=0 avail=6236 (45.3%) swpO=0 conn=36 myRSS=1467 php=51 phpRSS=5263 ap=153 tcp=297 topuser=customc