INCIDENT 2026-09-02 20:24:12 trigger: php_procs=55 php_rss=5862MB mysql_conn=44 ================================================================== load: 54.08 81.84 46.41 56/836 327001 ncpu:10 mem_avail: 5678MB/13777MB (41.2%) swap_used:2801MB swapout:0/s blocked(D):0 running:54 iowait:0.0% steal:0.0% php: 55 procs / 5862MB heaviest user: customc (49 procs, 5262MB) apache: 154 procs tcp_estab: 132 --- RSS by user (all processes) --- USER PROCS RSS_MB customc 50 5351 mysql 1 1477 nobody 152 1291 madalice 4 597 root 250 272 netdata 7 148 infinium 2 65 evolution 9 41 mailnull 6 37 mailman 20 21 cpanellogin 1 16 dovenull 6 12 zabbix 1 10 wp-toolkit 3 9 dovecot 3 6 dbus 1 2 cpanelconnecttrack 1 2 named 1 1 rpc 1 0 polkitd 1 0 --- php workers by user --- USER PROCS RSS_MB customc 49 5428 madalice 4 597 evolution 2 39 root 1 1 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 1442 MB Active(file): 1060 MB Inactive(file): 517 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 197 MB CommitLimit: 10984 MB Committed_AS: 14974 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 243603 root 24:12 96 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 1-18:01:45 2060 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 1513112 14.6 Ssl 06:10:00 /usr/sbin/mariadbd 326929 308173 customc 188664 15.8 S 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326923 308174 customc 188288 16.8 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326915 309303 customc 188052 17.5 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326925 308751 customc 184432 18.6 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326918 310034 customc 179316 16.5 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326931 309301 customc 170788 15.5 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326917 308617 customc 169408 18.4 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326924 308605 customc 166544 16.2 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326942 308903 customc 166496 22.7 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326927 310035 customc 165456 17.3 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326867 307857 customc 163092 15.7 R 00:10 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 314955 3929444 madalice 162372 5.5 S 02:11 php-fpm: pool madalice_com_au 314664 3929444 madalice 157972 7.8 S 02:13 php-fpm: pool madalice_com_au 326949 308666 customc 157056 27.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 324147 3929444 madalice 156760 7.4 S 00:57 php-fpm: pool madalice_com_au 326916 309307 customc 153284 15.4 R 00:07 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326946 308927 customc 143160 26.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326932 309545 customc 143100 18.2 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326936 309798 customc 141720 18.2 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326940 309542 customc 140288 21.2 S 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326939 309758 customc 139172 20.0 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326941 309267 customc 136216 23.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326934 308619 customc 135656 17.0 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326481 3929444 madalice 135172 6.1 S 00:34 php-fpm: pool madalice_com_au 326930 309234 customc 135128 14.6 R 00:06 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 508924 1 netdata 132124 2.0 Ssl 5-18:04:34 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 326943 308836 customc 128356 18.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326933 309530 customc 120848 17.0 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326948 309776 customc 113764 20.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326947 309824 customc 113460 22.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326955 309233 customc 113304 30.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326960 309420 customc 107760 37.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326953 309277 customc 106120 21.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326967 309437 customc 102692 62.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326945 309314 customc 98600 25.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326950 309296 customc 92280 14.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326944 309274 customc 91064 11.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326964 309308 customc 89732 17.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326957 309443 customc 86944 15.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 706071 655564 root 83340 0.0 S 17:46:15 spamd child 326965 309223 customc 80880 15.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326951 309318 customc 76872 15.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326998 308274 customc 73844 20.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326962 308663 customc 73260 12.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326961 310005 customc 70768 18.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326963 308943 customc 65684 10.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326959 309693 customc 65196 11.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326958 309442 customc 63648 10.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326956 309825 customc 62940 14.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326968 292490 customc 62560 15.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326969 309799 customc 59156 14.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326966 308167 customc 53308 11.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326993 308814 customc 51360 9.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 327010 308834 customc 51344 11.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 326411 1353308 infinium 44304 0.3 S 00:39 webmaild - serving 1.41.252.211 326982 309226 evolution 40616 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509236 509098 root 25604 0.0 Sl 5-18:04:31 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 310805 654808 infinium 23260 0.1 S 02:44 php-fpm: pool user_infinium 2900038 655564 root 21736 0.0 S 07:42:11 spamd child --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1127062 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min customc/customcentral.com.au-ssl_log 876 evolution/app.evolutionerp.com.au-ssl_log 50 evolution/portal.evolutionerp.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 12 aaa/aaadownunder.com.au 1 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 876 35.194.227.252 50 40.115.94.245 26 203.54.180.238 2 66.249.68.68 2 47.128.96.117 2 2a00:1911:1:e656:16de:202e:63bc:c31f 2 114.119.143.14 1 66.249.68.66 1 62.60.130.199 1 47.128.32.202 1 114.119.140.234 1 114.119.137.101 --- top request paths across all vhosts (last 3 min) --- 26 GET /heartbeat.php 22 GET /api/getItem/LWFB2001KG 3 GET /store/hand-painted-af1-swoosh-inkydrip/ 2 POST / 2 GET /store/hand-painted-nike-af1-badguy/ 2 GET /api/getItem/RHSG1257530 2 GET / 1 GET /wp-login.php 1 GET /wp-includes/css/ 1 GET /wp-admin/ 1 GET /var.zip 1 GET /var.tgz 1 GET /var.tar.xz 1 GET /var.tar.gz 1 GET /var.tar.bz2 1 GET /var.tar 1 GET /var.7z 1 GET /user.zst 1 GET /user.tgz 1 GET /user.tar.xz --- busiest 3 vhosts: top paths + last 10 requests --- == customc/customcentral.com.au-ssl_log == -- top paths -- 1 GET /var.zip 1 GET /var.tgz 1 GET /var.tar.xz 1 GET /var.tar.gz 1 GET /var.tar.bz2 1 GET /var.tar 1 GET /var.7z 1 GET /user.zst 1 GET /user.tgz 1 GET /user.tar.xz 1 GET /user.tar.bz2 1 GET /user.tar -- last 10 requests -- 35.194.227.252 - - [02/Sep/2026:20:24:11 +1000] "GET /mail.customcentral.com.au_backup.sql HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:10 +1000] "GET /backup_mail.customcentral.com.au.sql HTTP/1.1" 404 73481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:09 +1000] "GET /backup_mail.customcentral.com.au.zst HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:08 +1000] "GET /mail.customcentral.com.au.gz HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:06 +1000] "GET /mail.customcentral.com.au_backup.tar HTTP/1.1" 404 73481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:10 +1000] "GET /mail.customcentral.com.au_backup.sql.bz2 HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:08 +1000] "GET /backups/mail.customcentral.com.au.7z HTTP/1.1" 404 15750 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:08 +1000] "GET /mail.customcentral.com.au_backup.gz HTTP/1.1" 404 73479 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:08 +1000] "GET /backups/mail.customcentral.com.au.gz HTTP/1.1" 404 73482 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:24:09 +1000] "GET /backups/mail.customcentral.com.au.bz2 HTTP/1.1" 404 73483 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 22 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/RHSG1257530 1 GET /api/getItem/SHSG2020308 1 GET /api/getItem/SHSG2020258 1 GET /api/getItem/SHSG2020168 1 GET /api/getItem/RHSP200100608 1 GET /api/getItem/RHSP200100508 1 GET /api/getItem/RHSP200100408 1 GET /api/getItem/RHSP15050608 1 GET /api/getItem/RHSP150100608 1 GET /api/getItem/RHSP150100508 1 GET /api/getItem/RHSP12575608 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:20:23:30 +1000] "GET /api/getItem/RHSP200100508 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:30 +1000] "GET /api/getItem/RHSP200100608 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:31 +1000] "GET /api/getItem/SHSG2020168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:30 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:32 +1000] "GET /api/getItem/SHSG2020258 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:32 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:32 +1000] "GET /api/getItem/SHSG2020308 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:33 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:33 +1000] "GET /api/getItem/LOOP1200 HTTP/1.1" 200 1356 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:23:33 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:20:23:30 +1000] "GET /heartbeat.php?sentAt=1788344609&bytes=106,151,249,33&_=1788342075727 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:39 +1000] "GET /heartbeat.php?sentAt=1788344619&bytes=106,151,249,43&_=1788342075728 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:41 +1000] "GET /heartbeat.php?sentAt=1788344593&bytes=106,151,249,17&_=1788324351783 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:42 +1000] "GET /heartbeat.php?sentAt=1788344603&bytes=106,151,249,27&_=1788324351784 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:44 +1000] "GET /heartbeat.php?sentAt=1788344613&bytes=106,151,249,37&_=1788324351785 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:45 +1000] "GET /heartbeat.php?sentAt=1788344623&bytes=106,151,249,47&_=1788324351786 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:49 +1000] "GET /heartbeat.php?sentAt=1788344629&bytes=106,151,249,53&_=1788342075729 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:52 +1000] "GET /heartbeat.php?sentAt=1788344633&bytes=106,151,249,57&_=1788324351787 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:23:59 +1000] "GET /heartbeat.php?sentAt=1788344639&bytes=106,151,249,63&_=1788342075730 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:24:02 +1000] "GET /heartbeat.php?sentAt=1788344643&bytes=106,151,249,67&_=1788324351788 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-02 20:21:42 L1=151.45 run=52 blk=0 avail=6189 (44.9%) swpO=0 conn=40 myRSS=1465 php=50 phpRSS=5436 ap=154 tcp=303 topuser=customc 2026-09-02 20:21:42 L1=151.45 run=51 blk=1 avail=6183 (44.9%) swpO=0 conn=38 myRSS=1465 php=50 phpRSS=5479 ap=154 tcp=303 topuser=customc 2026-09-02 20:21:52 L1=135.24 run=43 blk=0 avail=6118 (44.4%) swpO=0 conn=32 myRSS=1466 php=45 phpRSS=4930 ap=153 tcp=303 topuser=customc 2026-09-02 20:21:52 L1=135.24 run=43 blk=0 avail=6113 (44.4%) swpO=0 conn=31 myRSS=1466 php=45 phpRSS=4942 ap=153 tcp=303 topuser=customc 2026-09-02 20:22:03 L1=120.75 run=46 blk=0 avail=6281 (45.6%) swpO=0 conn=37 myRSS=1467 php=50 phpRSS=5236 ap=155 tcp=297 topuser=customc 2026-09-02 20:22:03 L1=120.75 run=43 blk=0 avail=6236 (45.3%) swpO=0 conn=36 myRSS=1467 php=51 phpRSS=5263 ap=153 tcp=297 topuser=customc 2026-09-02 20:22:13 L1=109.62 run=53 blk=0 avail=5887 (42.7%) swpO=0 conn=42 myRSS=1467 php=51 phpRSS=5676 ap=153 tcp=293 topuser=customc 2026-09-02 20:22:19 L1=99.25 run=48 blk=0 avail=6080 (44.1%) swpO=0 conn=33 myRSS=1468 php=44 phpRSS=4614 ap=153 tcp=291 topuser=customc 2026-09-02 20:22:24 L1=94.90 run=50 blk=0 avail=6155 (44.7%) swpO=0 conn=40 myRSS=1468 php=47 phpRSS=5212 ap=153 tcp=288 topuser=customc 2026-09-02 20:22:30 L1=90.99 run=47 blk=0 avail=6223 (45.2%) swpO=0 conn=39 myRSS=1469 php=47 phpRSS=5155 ap=153 tcp=287 topuser=customc 2026-09-02 20:22:34 L1=86.58 run=43 blk=0 avail=6033 (43.8%) swpO=0 conn=39 myRSS=1469 php=47 phpRSS=5476 ap=153 tcp=313 topuser=customc 2026-09-02 20:22:40 L1=83.41 run=45 blk=0 avail=5891 (42.8%) swpO=0 conn=39 myRSS=1469 php=48 phpRSS=5603 ap=153 tcp=298 topuser=customc 2026-09-02 20:22:44 L1=80.50 run=44 blk=1 avail=6077 (44.1%) swpO=0 conn=35 myRSS=1470 php=46 phpRSS=5431 ap=153 tcp=300 topuser=customc 2026-09-02 20:22:51 L1=77.41 run=44 blk=0 avail=5873 (42.6%) swpO=0 conn=33 myRSS=1470 php=43 phpRSS=5353 ap=153 tcp=297 topuser=customc 2026-09-02 20:22:55 L1=74.74 run=47 blk=0 avail=6643 (48.2%) swpO=0 conn=40 myRSS=1471 php=44 phpRSS=4659 ap=153 tcp=297 topuser=customc 2026-09-02 20:23:01 L1=71.40 run=47 blk=0 avail=6156 (44.7%) swpO=0 conn=37 myRSS=1471 php=45 phpRSS=5018 ap=153 tcp=298 topuser=customc 2026-09-02 20:23:05 L1=68.96 run=43 blk=0 avail=7119 (51.7%) swpO=0 conn=34 myRSS=1471 php=40 phpRSS=4146 ap=153 tcp=303 topuser=customc 2026-09-02 20:23:12 L1=67.44 run=48 blk=1 avail=5765 (41.8%) swpO=0 conn=40 myRSS=1471 php=46 phpRSS=5552 ap=154 tcp=293 topuser=customc 2026-09-02 20:23:20 L1=65.14 run=53 blk=1 avail=5538 (40.2%) swpO=0 conn=48 myRSS=1472 php=52 phpRSS=5962 ap=154 tcp=279 topuser=customc 2026-09-02 20:23:22 L1=65.14 run=53 blk=0 avail=5499 (39.9%) swpO=0 conn=43 myRSS=1472 php=51 phpRSS=5964 ap=154 tcp=279 topuser=customc 2026-09-02 20:23:31 L1=63.04 run=52 blk=1 avail=5414 (39.3%) swpO=0 conn=42 myRSS=1474 php=52 phpRSS=5817 ap=154 tcp=284 topuser=customc 2026-09-02 20:23:32 L1=63.04 run=50 blk=1 avail=5675 (41.2%) swpO=0 conn=39 myRSS=1474 php=49 phpRSS=5837 ap=153 tcp=280 topuser=customc 2026-09-02 20:23:41 L1=60.48 run=47 blk=0 avail=5894 (42.8%) swpO=0 conn=41 myRSS=1475 php=51 phpRSS=5702 ap=154 tcp=288 topuser=customc 2026-09-02 20:23:43 L1=60.48 run=49 blk=0 avail=5839 (42.4%) swpO=0 conn=43 myRSS=1475 php=49 phpRSS=5620 ap=153 tcp=296 topuser=customc 2026-09-02 20:23:51 L1=58.52 run=52 blk=0 avail=5609 (40.7%) swpO=0 conn=45 myRSS=1476 php=52 phpRSS=6013 ap=153 tcp=291 topuser=customc 2026-09-02 20:23:53 L1=57.11 run=57 blk=0 avail=5846 (42.4%) swpO=0 conn=48 myRSS=1476 php=53 phpRSS=5803 ap=154 tcp=291 topuser=customc 2026-09-02 20:24:02 L1=55.82 run=53 blk=0 avail=4904 (35.6%) swpO=0 conn=45 myRSS=1477 php=52 phpRSS=6721 ap=153 tcp=229 topuser=customc 2026-09-02 20:24:04 L1=54.88 run=54 blk=0 avail=5348 (38.8%) swpO=0 conn=36 myRSS=1477 php=51 phpRSS=5734 ap=153 tcp=209 topuser=customc 2026-09-02 20:24:12 L1=54.08 run=54 blk=0 avail=5678 (41.2%) swpO=0 conn=44 myRSS=1477 php=55 phpRSS=5862 ap=154 tcp=132 topuser=customc 2026-09-02 20:24:14 L1=52.72 run=56 blk=0 avail=5403 (39.2%) swpO=0 conn=45 myRSS=1477 php=56 phpRSS=6305 ap=153 tcp=119 topuser=customc