INCIDENT 2026-08-30 12:26:36 trigger: php_rss=1615MB ================================================================== load: 2.46 1.54 1.10 8/676 137916 ncpu:10 mem_avail: 6931MB/13777MB (50.3%) swap_used:1826MB swapout:0/s blocked(D):0 running:10 iowait:0.1% steal:0.0% php: 11 procs / 1615MB heaviest user: madalice (7 procs, 1391MB) apache: 49 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2924 madalice 7 1347 root 245 1121 nobody 48 791 netdata 7 197 infinium 2 138 mailman 20 121 mailnull 5 105 aaa 1 73 cpanellogin 1 63 dovenull 6 46 wp-toolkit 3 31 alison 2 28 kurri 2 27 evolution 5 22 zabbix 1 21 dovecot 3 19 named 1 15 polkitd 1 5 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 7 1361 infinium 1 123 aaa 1 76 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5147 MB Active(file): 4651 MB Inactive(file): 904 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 601 MB CommitLimit: 10984 MB Committed_AS: 8820 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-10:07:57 7704 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2995176 7.3 Ssl 2-10:07:26 /usr/sbin/mariadbd 122577 510022 madalice 231844 17.2 S 02:53 php-fpm: pool madalice_com_au 137838 510022 madalice 218340 51.1 R 00:09 php-fpm: pool madalice_com_au 137450 510022 madalice 211868 25.7 R 01:09 php-fpm: pool madalice_com_au 123397 510022 madalice 209532 22.9 R 01:47 php-fpm: pool madalice_com_au 2328310 2277352 root 208620 0.0 S 09:48:26 spamd child 508924 1 netdata 177196 1.9 Ssl 2-10:06:55 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175488 0.0 Ss 10:03:32 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 165732 0.0 S 09:48:26 spamd child 137846 510022 madalice 165244 52.6 R 00:06 php-fpm: pool madalice_com_au 137848 510022 madalice 159396 41.8 S 00:06 php-fpm: pool madalice_com_au 137844 510022 madalice 158948 48.0 S 00:07 php-fpm: pool madalice_com_au 509266 1 root 148248 0.0 Ss 2-10:06:52 /usr/lib/systemd/systemd-journald 137885 137839 infinium 126956 53.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 137886 137870 aaa 82656 50.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4027958 1353308 cpanellogin 65200 0.0 S 01:28:23 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 509236 509098 root 53032 0.0 Sl 2-10:06:52 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 48892 0.0 Sl 2-10:06:50 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42480 0.1 Ss 39-09:45:18 cpsrvd (SSL) - waiting for connections 2275833 1 root 35924 0.0 Ss 10:04:22 lfd - sleeping 508720 1 mailnull 25296 0.0 Ss 2-10:06:59 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1469 1 root 24028 0.1 Ss 62-02:16:47 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23344 0.0 Ss 2-10:06:48 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 122494 506832 nobody 22924 0.0 S 03:09 /usr/sbin/httpd -k start 122567 506832 nobody 22676 0.1 S 02:56 /usr/sbin/httpd -k start 122870 506832 nobody 22584 0.0 S 02:25 /usr/sbin/httpd -k start 1463 1 root 21968 0.0 Ss 62-02:16:47 tailwatchd 137316 506832 nobody 21928 0.0 S 01:22 /usr/sbin/httpd -k start 137357 506832 nobody 21828 0.0 S 01:21 /usr/sbin/httpd -k start 137302 506832 nobody 21768 0.4 S 01:25 /usr/sbin/httpd -k start 137314 506832 nobody 21732 0.0 S 01:22 /usr/sbin/httpd -k start 483898 1 zabbix 21584 0.2 Ssl 2-10:08:09 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 137309 506832 nobody 21556 0.0 S 01:23 /usr/sbin/httpd -k start 137355 506832 nobody 21452 0.0 S 01:21 /usr/sbin/httpd -k start 137342 506832 nobody 21032 0.0 S 01:21 /usr/sbin/httpd -k start 137857 508720 mailnull 20940 0.0 S 00:03 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 137569 508720 mailnull 20740 0.0 S 00:49 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 137772 508720 mailnull 20732 0.0 S 00:11 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 137313 506832 nobody 20724 0.0 S 01:22 /usr/sbin/httpd -k start 137851 508720 mailnull 20544 0.0 S 00:04 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 137356 506832 nobody 20148 0.0 S 01:21 /usr/sbin/httpd -k start 137853 506832 nobody 19312 0.0 S 00:04 /usr/sbin/httpd -k start 137861 506832 nobody 19152 0.0 S 00:03 /usr/sbin/httpd -k start 137854 506832 nobody 18976 0.2 S 00:04 /usr/sbin/httpd -k start 137841 506832 nobody 18964 0.0 S 00:08 /usr/sbin/httpd -k start 137847 506832 nobody 18768 0.0 S 00:06 /usr/sbin/httpd -k start 137855 506832 nobody 18748 0.0 S 00:04 /usr/sbin/httpd -k start 137850 506832 nobody 18736 0.0 S 00:05 /usr/sbin/httpd -k start 137859 506832 nobody 18736 0.0 S 00:03 /usr/sbin/httpd -k start 137852 506832 nobody 18716 0.2 S 00:04 /usr/sbin/httpd -k start 137842 506832 nobody 18708 0.0 S 00:08 /usr/sbin/httpd -k start 137862 506832 nobody 18676 0.0 S 00:03 /usr/sbin/httpd -k start 137863 506832 nobody 18676 0.0 S 00:03 /usr/sbin/httpd -k start 137858 506832 nobody 18664 0.0 S 00:03 /usr/sbin/httpd -k start 137860 506832 nobody 18652 0.0 S 00:03 /usr/sbin/httpd -k start 137849 506832 nobody 18612 0.0 S 00:05 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18068 0.0 Ss 2-08:14:29 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 137865 506832 nobody 17480 0.0 S 00:03 /usr/sbin/httpd -k start 137864 506832 nobody 17476 0.0 S 00:03 /usr/sbin/httpd -k start 137839 506832 nobody 17092 0.1 S 00:09 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4501677 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 4501669 | madalice_wp | madalice_wp | Query | 0 | Sending data | SELECT option_value FROM AMuqf6qZ_options WHERE option_name LIKE 'wc_square_background_sync_job_%' AND ( option_value LIKE '%\"status\":\"queued\"%' OR option_value LIKE '%\"status\":\"processing\"%' ) ORDER BY option_id ASC LIMIT 1 | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min infinium/infinium.net.au-ssl_log 131 madalice/madalice.com.au-ssl_log 86 evolution/portal.evolutionerp.com.au-ssl_log 24 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 117 20.48.179.39 55 34.175.206.134 24 203.54.180.238 6 50.6.169.131 5 118.127.40.55 4 123.50.132.96 3 50.6.200.195 3 114.119.159.70 2 67.205.0.102 2 160.250.130.168 2 102.134.101.35 1 69.57.172.119 1 43.173.179.40 1 43.173.178.178 1 43.172.196.202 --- top request paths across all vhosts (last 3 min) --- 24 GET /heartbeat.php 10 POST / 7 GET / 5 GET /wp-login.php 4 GET /store/hand-painted-af1-swoosh-inkydrip/ 3 POST /wp-login.php 3 POST /wp-cron.php 3 GET /wp-json/wp/v2/users/me 3 GET /store/hand-painted-af1-swoosh-colour-blend2/ 3 GET /admin.php 2 GET /wp-json/ldlms/v2/users 2 GET /wp-content/themes/index.php 2 GET /.env.save 2 GET /.env.old 2 GET /.env.bak 2 GET /.env.backup 2 GET /checkout-2/ 2 GET /av.php 1 GET /zoo1.php 1 GET /xnm-apc.php --- busiest 3 vhosts: top paths + last 10 requests --- == infinium/infinium.net.au-ssl_log == -- top paths -- 5 GET /wp-login.php 3 POST /wp-login.php 3 POST /wp-cron.php 3 GET /wp-json/wp/v2/users/me 3 GET /admin.php 2 GET /wp-content/themes/index.php 2 GET /av.php 1 GET /zoo1.php 1 GET /xnm-apc.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp-temp.php -- last 10 requests -- 118.127.40.55 - - [30/Aug/2026:12:25:08 +1000] "POST /wp-cron.php?doing_wp_cron=1788056708.2659680843353271484375 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://infinium.net.au" 50.6.169.131 - - [30/Aug/2026:12:25:07 +1000] "GET /wp-login.php HTTP/1.1" 200 2026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.169.131 - - [30/Aug/2026:12:25:10 +1000] "POST /wp-login.php HTTP/1.1" 503 6746 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0 50.6.200.195 - - [30/Aug/2026:12:25:26 +1000] "GET /wp-login.php HTTP/1.1" 503 6556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.169.131 - - [30/Aug/2026:12:25:27 +1000] "GET /wp-login.php HTTP/1.1" 503 6556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.169.131 - - [30/Aug/2026:12:25:31 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.200.195 - - [30/Aug/2026:12:25:36 +1000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 503 6556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 118.127.40.55 - - [30/Aug/2026:12:25:49 +1000] "POST /wp-cron.php?doing_wp_cron=1788056749.6376960277557373046875 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://infinium.net.au" 102.134.101.35 - - [30/Aug/2026:12:25:49 +1000] "GET /wp-login.php HTTP/1.1" 200 2025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 102.134.101.35 - - [30/Aug/2026:12:25:53 +1000] "POST /wp-login.php HTTP/1.1" 503 6746 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 == madalice/madalice.com.au-ssl_log == -- top paths -- 10 POST / 7 GET / 4 GET /store/hand-painted-af1-swoosh-inkydrip/ 3 GET /store/hand-painted-af1-swoosh-colour-blend2/ 2 GET /wp-json/ldlms/v2/users 2 GET /.env.save 2 GET /.env.old 2 GET /.env.bak 2 GET /.env.backup 2 GET /checkout-2/ 1 GET /www/.env 1 GET /wp-json/wp/v2/media -- last 10 requests -- 34.175.206.134 - - [30/Aug/2026:12:26:29 +1000] "GET /wp-config.php.bak HTTP/1.1" 404 36647 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:30 +1000] "GET /config.php.bak HTTP/1.1" 404 36646 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:31 +1000] "GET /configuration.php.bak HTTP/1.1" 404 36653 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:32 +1000] "GET /config.yml.bak HTTP/1.1" 404 36648 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:32 +1000] "GET /config.yaml.bak HTTP/1.1" 404 36651 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 123.50.132.96 - - [30/Aug/2026:12:26:33 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/checkout-2/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605. 34.175.206.134 - - [30/Aug/2026:12:26:33 +1000] "GET /database.yml.bak HTTP/1.1" 404 36649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:33 +1000] "GET /settings.py.bak HTTP/1.1" 404 36648 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:34 +1000] "GET /.npmrc HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:12:26:33 +1000] "GET /.git-credentials HTTP/1.1" 404 36650 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 24 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:12:25:15 +1000] "GET /heartbeat.php?sentAt=1788056713&bytes=106,147,148,137&_=1787897056322 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:15 +1000] "GET /heartbeat.php?sentAt=1788056713&bytes=106,147,148,137&_=1787918094807 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:23 +1000] "GET /heartbeat.php?sentAt=1788056723&bytes=106,147,148,147&_=1787897056323 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:23 +1000] "GET /heartbeat.php?sentAt=1788056723&bytes=106,147,148,147&_=1787918094808 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:33 +1000] "GET /heartbeat.php?sentAt=1788056733&bytes=106,147,148,157&_=1787897056324 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:33 +1000] "GET /heartbeat.php?sentAt=1788056733&bytes=106,147,148,157&_=1787918094809 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:43 +1000] "GET /heartbeat.php?sentAt=1788056743&bytes=106,147,148,167&_=1787897056325 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:43 +1000] "GET /heartbeat.php?sentAt=1788056743&bytes=106,147,148,167&_=1787918094810 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:53 +1000] "GET /heartbeat.php?sentAt=1788056753&bytes=106,147,148,177&_=1787897056326 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:12:25:53 +1000] "GET /heartbeat.php?sentAt=1788056753&bytes=106,147,148,177&_=1787918094811 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-30 12:24:06 L1=0.63 run=3 blk=0 avail=8242 (59.8%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=16 tcp=27 topuser=madalice 2026-08-30 12:24:15 L1=0.76 run=1 blk=0 avail=8148 (59.1%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=32 tcp=32 topuser=madalice 2026-08-30 12:24:16 L1=0.76 run=2 blk=0 avail=8145 (59.1%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=31 tcp=29 topuser=madalice 2026-08-30 12:24:25 L1=1.02 run=2 blk=0 avail=8182 (59.4%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=412 ap=22 tcp=23 topuser=madalice 2026-08-30 12:24:26 L1=1.02 run=1 blk=0 avail=8114 (58.9%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=483 ap=21 tcp=26 topuser=madalice 2026-08-30 12:24:35 L1=1.17 run=1 blk=0 avail=8225 (59.7%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=19 tcp=24 topuser=madalice 2026-08-30 12:24:36 L1=1.17 run=1 blk=0 avail=8221 (59.7%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=19 tcp=20 topuser=madalice 2026-08-30 12:24:45 L1=1.30 run=2 blk=0 avail=8229 (59.7%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=17 tcp=25 topuser=madalice 2026-08-30 12:24:46 L1=1.30 run=1 blk=0 avail=8227 (59.7%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=361 ap=17 tcp=26 topuser=madalice 2026-08-30 12:24:55 L1=1.41 run=1 blk=0 avail=8274 (60.1%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=319 ap=17 tcp=24 topuser=madalice 2026-08-30 12:24:56 L1=1.41 run=1 blk=0 avail=8272 (60.0%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=319 ap=17 tcp=23 topuser=madalice 2026-08-30 12:25:05 L1=1.50 run=4 blk=0 avail=8221 (59.7%) swpO=0 conn=1 myRSS=2924 php=4 phpRSS=387 ap=15 tcp=26 topuser=madalice 2026-08-30 12:25:06 L1=1.50 run=3 blk=0 avail=8252 (59.9%) swpO=0 conn=2 myRSS=2924 php=4 phpRSS=354 ap=15 tcp=26 topuser=madalice 2026-08-30 12:25:16 L1=1.65 run=2 blk=1 avail=8130 (59.0%) swpO=0 conn=1 myRSS=2924 php=6 phpRSS=425 ap=31 tcp=63 topuser=madalice 2026-08-30 12:25:16 L1=1.65 run=1 blk=0 avail=8045 (58.4%) swpO=0 conn=2 myRSS=2924 php=4 phpRSS=346 ap=47 tcp=64 topuser=madalice 2026-08-30 12:25:26 L1=2.01 run=3 blk=0 avail=7985 (58.0%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=488 ap=40 tcp=25 topuser=madalice 2026-08-30 12:25:26 L1=2.01 run=3 blk=0 avail=8020 (58.2%) swpO=0 conn=2 myRSS=2924 php=5 phpRSS=455 ap=40 tcp=24 topuser=madalice 2026-08-30 12:25:36 L1=2.23 run=4 blk=0 avail=7925 (57.5%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=600 ap=30 tcp=34 topuser=madalice 2026-08-30 12:25:36 L1=2.23 run=4 blk=0 avail=7949 (57.7%) swpO=0 conn=2 myRSS=2924 php=5 phpRSS=571 ap=30 tcp=33 topuser=madalice 2026-08-30 12:25:46 L1=2.27 run=1 blk=0 avail=8067 (58.6%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=506 ap=22 tcp=29 topuser=madalice 2026-08-30 12:25:46 L1=2.27 run=1 blk=0 avail=8067 (58.6%) swpO=0 conn=2 myRSS=2924 php=5 phpRSS=506 ap=22 tcp=29 topuser=madalice 2026-08-30 12:25:56 L1=2.31 run=3 blk=0 avail=7960 (57.8%) swpO=0 conn=1 myRSS=2924 php=7 phpRSS=711 ap=16 tcp=30 topuser=madalice 2026-08-30 12:25:56 L1=2.31 run=2 blk=0 avail=7976 (57.9%) swpO=0 conn=2 myRSS=2924 php=7 phpRSS=693 ap=16 tcp=30 topuser=madalice 2026-08-30 12:26:06 L1=2.41 run=2 blk=0 avail=8098 (58.8%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=510 ap=16 tcp=29 topuser=madalice 2026-08-30 12:26:06 L1=2.41 run=2 blk=0 avail=8068 (58.6%) swpO=0 conn=2 myRSS=2924 php=5 phpRSS=543 ap=16 tcp=29 topuser=madalice 2026-08-30 12:26:16 L1=2.42 run=1 blk=0 avail=8107 (58.8%) swpO=0 conn=1 myRSS=2924 php=5 phpRSS=506 ap=16 tcp=23 topuser=madalice 2026-08-30 12:26:16 L1=2.42 run=1 blk=0 avail=8107 (58.8%) swpO=0 conn=2 myRSS=2924 php=5 phpRSS=506 ap=16 tcp=23 topuser=madalice 2026-08-30 12:26:26 L1=2.28 run=2 blk=0 avail=8010 (58.1%) swpO=0 conn=1 myRSS=2924 php=6 phpRSS=577 ap=15 tcp=25 topuser=madalice 2026-08-30 12:26:26 L1=2.28 run=3 blk=0 avail=7974 (57.9%) swpO=0 conn=2 myRSS=2924 php=6 phpRSS=614 ap=15 tcp=26 topuser=madalice 2026-08-30 12:26:36 L1=2.46 run=10 blk=0 avail=6931 (50.3%) swpO=0 conn=9 myRSS=2924 php=11 phpRSS=1615 ap=49 tcp=54 topuser=madalice