INCIDENT 2026-09-02 20:23:05 trigger: php_procs=40 php_rss=4146MB mysql_conn=34 ================================================================== load: 68.96 90.25 46.34 39/821 322656 ncpu:10 mem_avail: 7119MB/13777MB (51.7%) swap_used:2810MB swapout:0/s blocked(D):0 running:43 iowait:0.4% steal:0.0% php: 40 procs / 4146MB heaviest user: customc (36 procs, 3854MB) apache: 153 procs tcp_estab: 303 --- RSS by user (all processes) --- USER PROCS RSS_MB customc 37 4168 mysql 1 1471 nobody 152 1250 madalice 2 289 root 253 256 netdata 7 147 infinium 2 64 mailman 20 21 cpanellogin 1 16 dovenull 6 12 zabbix 1 10 wp-toolkit 3 9 mailnull 2 9 aaa 1 9 dovecot 3 6 evolution 10 5 cpanelconnecttrack 1 2 named 1 1 dbus 1 1 rpc 1 0 --- php workers by user --- USER PROCS RSS_MB customc 37 4009 madalice 2 289 root 1 1 evolution 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 855 MB Active(file): 610 MB Inactive(file): 377 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 188 MB CommitLimit: 10984 MB Committed_AS: 13081 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 243603 root 23:05 96 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 1-18:00:38 2060 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 1507052 14.5 Ssl 06:08:53 /usr/sbin/mariadbd 322022 309545 customc 188896 19.1 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 321920 308903 customc 187420 17.0 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322172 308605 customc 187148 19.2 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322135 309693 customc 186828 28.2 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 321938 309824 customc 184448 16.7 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322498 310034 customc 177716 40.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322511 309758 customc 172064 53.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322045 308927 customc 168932 20.0 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322161 309798 customc 159708 18.2 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 321891 309223 customc 157936 13.5 S 00:08 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314664 3929444 madalice 157700 6.4 S 01:06 php-fpm: pool madalice_com_au 322407 310035 customc 151820 33.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322354 309267 customc 146868 22.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322398 309296 customc 143504 23.6 S 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 321982 309443 customc 142468 12.7 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314955 3929444 madalice 138632 3.1 S 01:04 php-fpm: pool madalice_com_au 322460 308666 customc 132124 36.5 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 508924 1 netdata 131552 2.0 Ssl 5-18:03:27 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 322304 308654 customc 127304 19.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322329 308274 customc 126436 14.5 S 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322341 308619 customc 126360 31.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322307 308173 customc 123860 20.2 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322513 309314 customc 120760 34.5 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322353 307857 customc 119344 31.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322477 309825 customc 115136 28.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322582 308617 customc 114328 68.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322449 309442 customc 114312 40.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322500 309530 customc 105864 20.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322534 310005 customc 101716 24.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322370 308174 customc 93332 18.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322579 308943 customc 86976 41.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322538 309318 customc 86856 14.0 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 706071 655564 root 83340 0.0 S 17:45:08 spamd child 322556 309308 customc 82200 38.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322557 309234 customc 71000 24.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322367 308167 customc 59936 6.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322647 309385 customc 59920 18.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322575 309303 customc 51304 18.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 322605 308814 customc 46912 21.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 311166 1353308 infinium 43196 0.1 S 01:34 webmaild - serving 1.41.252.211 322696 309226 customc 38916 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 509236 509098 root 25648 0.0 Sl 5-18:03:24 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 322704 309277 customc 24024 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 310805 654808 infinium 23072 0.2 S 01:37 php-fpm: pool user_infinium 2900038 655564 root 21736 0.0 S 07:41:04 spamd child 309233 506832 nobody 19392 0.4 S 05:54 /usr/sbin/httpd -k start 309274 506832 nobody 18944 0.6 S 05:16 /usr/sbin/httpd -k start 309776 506832 nobody 18616 0.2 S 01:48 /usr/sbin/httpd -k start 309825 506832 nobody 18496 0.1 S 01:47 /usr/sbin/httpd -k start 309437 506832 nobody 18176 0.6 S 02:39 /usr/sbin/httpd -k start 310034 506832 nobody 18128 0.1 S 01:44 /usr/sbin/httpd -k start 509671 508992 netdata 18028 2.1 Sl 5-18:03:22 /usr/libexec/netdata/plugins.d/apps.plugin 1 309530 506832 nobody 17916 0.3 S 02:08 /usr/sbin/httpd -k start 309277 506832 nobody 17768 0.6 S 05:15 /usr/sbin/httpd -k start 309307 506832 nobody 17696 1.4 S 04:59 /usr/sbin/httpd -k start 309296 506832 nobody 17672 0.9 S 05:03 /usr/sbin/httpd -k start 309301 506832 nobody 17608 1.5 S 05:02 /usr/sbin/httpd -k start 309318 506832 nobody 17372 1.0 S 04:58 /usr/sbin/httpd -k start 309443 506832 nobody 17088 0.6 S 02:33 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1126119 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+------------------+------+------------------------------+----------------------------------------------------------------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+------------------+------+------------------------------+----------------------------------------------------------------------------------------------------+ | 1126108 | customc_wp_mjkcu | 0 | Waiting for table level lock | SELECT option_value FROM 11jOh6_options WHERE option_name = 'wpr-sticky-section' LIMIT 1 | | 1126100 | customc_wp_mjkcu | 0 | Waiting for table level lock | SELECT option_value FROM 11jOh6_options WHERE option_name = 'wpr-element-phone-call' LIMIT 1 | | 1126085 | customc_wp_mjkcu | 0 | Waiting for table level lock | SELECT option_value FROM 11jOh6_options WHERE option_name = 'woocommerce_thumbnail_size_w' LIMIT 1 | | 1126081 | customc_wp_mjkcu | 0 | Waiting for table level lock | SELECT option_value FROM 11jOh6_options WHERE option_name = 'wpr-element-post-comments' LIMIT 1 | | 1126073 | customc_wp_mjkcu | 0 | Waiting for table level lock | DELETE FROM `11jOh6_options` WHERE `option_name` = '_elementor_design_system_sync_css_meta' | +---------+------------------+------+------------------------------+----------------------------------------------------------------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min customc/customcentral.com.au-ssl_log 666 evolution/app.evolutionerp.com.au-ssl_log 44 madalice/madalice.com.au-ssl_log 18 evolution/portal.evolutionerp.com.au-ssl_log 12 aaa/aaadownunder.com.au 2 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 666 35.194.227.252 44 40.115.94.245 12 203.54.180.238 2 62.60.130.199 2 114.119.146.16 1 66.249.68.66 1 47.128.96.116 1 47.128.32.202 1 44.212.232.231 1 3.90.73.206 1 35.169.119.108 1 34.238.45.183 1 34.194.233.48 1 3.227.180.70 1 3.212.205.90 --- top request paths across all vhosts (last 3 min) --- 19 GET /api/getItem/LWFB2001KG 12 GET /heartbeat.php 3 GET /wp-content/plugins/elementor/assets/js/packages/menus/ 2 GET /store/hand-painted-nike-af1-afl-brisbane/ 2 GET / 1 POST / 1 GET /wp-includes/widgets/ 1 GET /wp-includes/css/ 1 GET /wp-content/plugins/elementor/includes/settings/controls.php 1 GET /wp-content/plugins/elementor/includes/ 1 GET /wp-content/plugins/elementor/data/base/ 1 GET /wp-content/plugins/elementor/assets/lib/nouislider/ 1 GET /wp-content/plugins/elementor/assets/js/packages/env/ 1 GET /wp-content/plugins/elementor/assets/js/packages/editor-styles-repository/ 1 GET /wp-content/plugins/elementor/app/ 1 GET /virtualenv.gz 1 GET /.venv.zip 1 GET /.venv.tgz 1 GET /.venv.tar.gz 1 GET /.venv.tar --- busiest 3 vhosts: top paths + last 10 requests --- == customc/customcentral.com.au-ssl_log == -- top paths -- 1 GET /virtualenv.gz 1 GET /.venv.zip 1 GET /.venv.tgz 1 GET /.venv.tar.gz 1 GET /.venv.tar 1 GET /.venv.rar 1 GET /var.zip 1 GET /var.tgz 1 GET /var.tar.xz 1 GET /var.tar.gz 1 GET /var.tar.bz2 1 GET /var.tar -- last 10 requests -- 35.194.227.252 - - [02/Sep/2026:20:23:03 +1000] "GET /db_2026-08.tar.gz HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:00 +1000] "GET /db_202609.sql.gz HTTP/1.1" 404 73460 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:04 +1000] "GET /db_202607.zip HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:03 +1000] "GET /db202608.sql HTTP/1.1" 404 73457 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:05 +1000] "GET /db2026-07.tar.gz HTTP/1.1" 404 73461 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:02 +1000] "GET /db202608.zip HTTP/1.1" 404 73457 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:05 +1000] "GET /db_202607.sql.gz HTTP/1.1" 404 73461 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:01 +1000] "GET /db_2026-09.sql.gz HTTP/1.1" 404 73461 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:03 +1000] "GET /db_202608.sql.gz HTTP/1.1" 404 73461 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:23:04 +1000] "GET /db2026-08.sql HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 19 GET /api/getItem/LWFB2001KG 1 GET /api/getItem/SHSP200200608 1 GET /api/getItem/SHSP200200508 1 GET /api/getItem/SHSP150150608 1 GET /api/getItem/SHSP150150508 1 GET /api/getItem/SHSP125125608 1 GET /api/getItem/SHSP100100608 1 GET /api/getItem/SHSG125125508 1 GET /api/getItem/SHSG125125408 1 GET /api/getItem/SHSG100100508 1 GET /api/getItem/RHSG7550168 1 GET /api/getItem/RHSG7525258 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:20:21:34 +1000] "GET /api/getItem/RHSG6535308 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:35 +1000] "GET /api/getItem/RHSG6535408 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:35 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:35 +1000] "GET /api/getItem/RHSG7525168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:36 +1000] "GET /api/getItem/RHSG7525208 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:36 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:37 +1000] "GET /api/getItem/RHSG7525258 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:37 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:21:38 +1000] "GET /api/getItem/RHSG7550168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /wp-content/plugins/elementor/assets/js/packages/menus/ 2 GET /store/hand-painted-nike-af1-afl-brisbane/ 2 GET / 1 POST / 1 GET /wp-content/plugins/elementor/includes/settings/controls.php 1 GET /wp-content/plugins/elementor/includes/ 1 GET /wp-content/plugins/elementor/data/base/ 1 GET /wp-content/plugins/elementor/assets/lib/nouislider/ 1 GET /wp-content/plugins/elementor/assets/js/packages/env/ 1 GET /wp-content/plugins/elementor/assets/js/packages/editor-styles-repository/ 1 GET /wp-content/plugins/elementor/app/ 1 GET /store/hand-painted-nike-af1-afl-essendon/ -- last 10 requests -- 18.213.240.226 - - [02/Sep/2026:20:21:20 +1000] "GET /wp-content/plugins/elementor/includes/settings/controls.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https: 18.206.47.187 - - [02/Sep/2026:20:21:21 +1000] "GET /wp-content/plugins/elementor/app/?C=D;O%3DD HTTP/1.1" 200 352 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.ama 47.128.96.116 - - [02/Sep/2026:20:21:17 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/af1-pink-hearts/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, 114.119.146.16 - - [02/Sep/2026:20:21:20 +1000] "GET /store/hand-painted-nike-af1-afl-essendon/?amp%3Bwcpr_rating=2&wcpr_image=1&verified=1&wcpr_page=2 HTTP/1.1" 404 36675 "https://madalice.com.au/store/hand-painted-nike 114.119.146.16 - - [02/Sep/2026:20:21:30 +1000] "GET /store/hand-painted-nike-af1-afl-brisbane/?amp%3Bwcpr_rating=4&image=1&rating=5 HTTP/1.1" 404 36666 "https://madalice.com.au/store/hand-painted-nike-af1-afl-brisbane/? 114.119.143.104 - - [02/Sep/2026:20:21:52 +1000] "GET /store/hand-painted-nike-af1-afl-brisbane/?amp%3Bwcpr_rating=4&image=1&rating=2 HTTP/1.1" 404 36666 "https://madalice.com.au/store/hand-painted-nike-af1-afl-brisbane/ 47.128.32.202 - - [02/Sep/2026:20:22:07 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/we-customise-shoes-australia/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 ( 66.249.68.66 - - [02/Sep/2026:20:22:17 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/process/printed/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/53 114.119.143.14 - - [02/Sep/2026:20:22:20 +1000] "GET /store/hand-painted-af1-swoosh-rainbow/?rating=3&wcpr_verified=1&wcpr_image=1&wcpr_rating=4 HTTP/1.1" 404 36671 "https://madalice.com.au/store/hand-painted-af1-swoosh- 114.119.140.234 - - [02/Sep/2026:20:22:34 +1000] "GET /store/hand-painted-af1-swoosh-inkydrip/?wcpr_verified=1&wcpr_rating=4&rating=4&wcpr_image=1 HTTP/1.1" 200 53562 "https://madalice.com.au/store/hand-painted-af1-swoos --- last 30 samples (run-up to this incident) --- 2026-09-02 20:16:29 L1=4.61 run=35 blk=0 avail=6770 (49.1%) swpO=6 conn=27 myRSS=2207 php=33 phpRSS=3416 ap=46 tcp=290 topuser=customc 2026-09-02 20:16:29 L1=4.61 run=37 blk=0 avail=6737 (48.9%) swpO=6 conn=28 myRSS=2207 php=33 phpRSS=3502 ap=47 tcp=290 topuser=customc 2026-09-02 20:16:40 L1=12.10 run=64 blk=0 avail=4489 (32.6%) swpO=2283 conn=46 myRSS=2207 php=52 phpRSS=6022 ap=76 tcp=287 topuser=customc 2026-09-02 20:16:43 L1=15.53 run=78 blk=0 avail=4209 (30.6%) swpO=1793 conn=69 myRSS=2207 php=75 phpRSS=7000 ap=76 tcp=288 topuser=customc 2026-09-02 20:16:50 L1=20.86 run=91 blk=0 avail=2275 (16.5%) swpO=3894 conn=67 myRSS=2209 php=78 phpRSS=9103 ap=96 tcp=289 topuser=customc 2026-09-02 20:16:54 L1=27.68 run=94 blk=0 avail=2143 (15.6%) swpO=3540 conn=78 myRSS=2209 php=91 phpRSS=9532 ap=105 tcp=288 topuser=customc 2026-09-02 20:17:01 L1=34.35 run=107 blk=2 avail=899 (6.5%) swpO=4581 conn=89 myRSS=2200 php=97 phpRSS=10966 ap=126 tcp=293 topuser=customc 2026-09-02 20:17:05 L1=37.52 run=52 blk=61 avail=302 (2.2%) swpO=29580 conn=91 myRSS=1924 php=99 phpRSS=11930 ap=126 tcp=292 topuser=customc 2026-09-02 20:17:13 L1=44.21 run=146 blk=4 avail=117 (0.9%) swpO=54241 conn=- myRSS=1613 php=120 phpRSS=10274 ap=136 tcp=39 topuser=customc 2026-09-02 20:17:50 L1=103.52 run=177 blk=9 avail=137 (1.0%) swpO=11504 conn=91 myRSS=1613 php=123 phpRSS=10364 ap=135 tcp=38 topuser=customc 2026-09-02 20:21:05 L1=190.14 run=4 blk=98 avail=899 (6.5%) swpO=552 conn=86 myRSS=1530 php=117 phpRSS=9622 ap=144 tcp=176 topuser=customc 2026-09-02 20:21:31 L1=170.77 run=53 blk=0 avail=5698 (41.4%) swpO=2359 conn=39 myRSS=1458 php=42 phpRSS=5469 ap=153 tcp=302 topuser=customc 2026-09-02 20:21:31 L1=170.77 run=48 blk=1 avail=5809 (42.2%) swpO=836 conn=36 myRSS=1458 php=43 phpRSS=5537 ap=154 tcp=301 topuser=customc 2026-09-02 20:21:42 L1=151.45 run=52 blk=0 avail=6189 (44.9%) swpO=0 conn=40 myRSS=1465 php=50 phpRSS=5436 ap=154 tcp=303 topuser=customc 2026-09-02 20:21:42 L1=151.45 run=51 blk=1 avail=6183 (44.9%) swpO=0 conn=38 myRSS=1465 php=50 phpRSS=5479 ap=154 tcp=303 topuser=customc 2026-09-02 20:21:52 L1=135.24 run=43 blk=0 avail=6118 (44.4%) swpO=0 conn=32 myRSS=1466 php=45 phpRSS=4930 ap=153 tcp=303 topuser=customc 2026-09-02 20:21:52 L1=135.24 run=43 blk=0 avail=6113 (44.4%) swpO=0 conn=31 myRSS=1466 php=45 phpRSS=4942 ap=153 tcp=303 topuser=customc 2026-09-02 20:22:03 L1=120.75 run=46 blk=0 avail=6281 (45.6%) swpO=0 conn=37 myRSS=1467 php=50 phpRSS=5236 ap=155 tcp=297 topuser=customc 2026-09-02 20:22:03 L1=120.75 run=43 blk=0 avail=6236 (45.3%) swpO=0 conn=36 myRSS=1467 php=51 phpRSS=5263 ap=153 tcp=297 topuser=customc 2026-09-02 20:22:13 L1=109.62 run=53 blk=0 avail=5887 (42.7%) swpO=0 conn=42 myRSS=1467 php=51 phpRSS=5676 ap=153 tcp=293 topuser=customc 2026-09-02 20:22:19 L1=99.25 run=48 blk=0 avail=6080 (44.1%) swpO=0 conn=33 myRSS=1468 php=44 phpRSS=4614 ap=153 tcp=291 topuser=customc 2026-09-02 20:22:24 L1=94.90 run=50 blk=0 avail=6155 (44.7%) swpO=0 conn=40 myRSS=1468 php=47 phpRSS=5212 ap=153 tcp=288 topuser=customc 2026-09-02 20:22:30 L1=90.99 run=47 blk=0 avail=6223 (45.2%) swpO=0 conn=39 myRSS=1469 php=47 phpRSS=5155 ap=153 tcp=287 topuser=customc 2026-09-02 20:22:34 L1=86.58 run=43 blk=0 avail=6033 (43.8%) swpO=0 conn=39 myRSS=1469 php=47 phpRSS=5476 ap=153 tcp=313 topuser=customc 2026-09-02 20:22:40 L1=83.41 run=45 blk=0 avail=5891 (42.8%) swpO=0 conn=39 myRSS=1469 php=48 phpRSS=5603 ap=153 tcp=298 topuser=customc 2026-09-02 20:22:44 L1=80.50 run=44 blk=1 avail=6077 (44.1%) swpO=0 conn=35 myRSS=1470 php=46 phpRSS=5431 ap=153 tcp=300 topuser=customc 2026-09-02 20:22:51 L1=77.41 run=44 blk=0 avail=5873 (42.6%) swpO=0 conn=33 myRSS=1470 php=43 phpRSS=5353 ap=153 tcp=297 topuser=customc 2026-09-02 20:22:55 L1=74.74 run=47 blk=0 avail=6643 (48.2%) swpO=0 conn=40 myRSS=1471 php=44 phpRSS=4659 ap=153 tcp=297 topuser=customc 2026-09-02 20:23:01 L1=71.40 run=47 blk=0 avail=6156 (44.7%) swpO=0 conn=37 myRSS=1471 php=45 phpRSS=5018 ap=153 tcp=298 topuser=customc 2026-09-02 20:23:05 L1=68.96 run=43 blk=0 avail=7119 (51.7%) swpO=0 conn=34 myRSS=1471 php=40 phpRSS=4146 ap=153 tcp=303 topuser=customc