RPI Status with PHP

system date : Fri Jan  9 19:50:05 PST 2026

whoami : www-data

uname -a : Linux rpi4bmedia 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l GNU/Linux

uptime :  19:50:05 up 4 days,  4:58,  2 users,  load average: 0.27, 0.14, 0.10

File systems on RPI
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        29G  8.0G   20G  29% /
devtmpfs        1.8G     0  1.8G   0% /dev
tmpfs           1.9G     0  1.9G   0% /dev/shm
tmpfs           1.9G   50M  1.9G   3% /run
tmpfs           5.0M  4.0K  5.0M   1% /run/lock
tmpfs           1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/mmcblk0p1  253M   49M  204M  20% /boot
/dev/sda1       1.9T   23G  1.8T   2% /media/usbdisk2t
tmpfs           384M  4.0K  384M   1% /run/user/1001

ps aux --sort=-pcpu on RPI
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
gottsch   1257  2.3  1.1 442880 44964 ?        Sl   Jan05 140:39 lxpanel --profile LXDE-pi
gottsch    769  2.2  1.1 442724 44436 ?        Sl   Jan05 136:14 lxpanel --profile LXDE-pi
root      1012  0.4  1.3 158680 54916 tty7     Ssl+ Jan05  26:01 /usr/lib/xorg/Xorg :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
gottsch    657  0.2  0.7 113500 30152 ?        Sl   Jan05  16:50 /usr/bin/Xvnc-core :1 -auth /home/gottsch/.Xauthority -pn -fp /usr/share/vnc/fonts/ -geometry 1280x1024 -depth 24
root         1  0.0  0.2  33880  8248 ?        Ss   Jan05   1:10 /sbin/init splash
root         2  0.0  0.0      0     0 ?        S    Jan05   0:00 [kthreadd]
root         3  0.0  0.0      0     0 ?        I<   Jan05   0:00 [rcu_gp]
root         4  0.0  0.0      0     0 ?        I<   Jan05   0:00 [rcu_par_gp]
root         8  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mm_percpu_wq]
root         9  0.0  0.0      0     0 ?        S    Jan05   0:00 [rcu_tasks_rude_]
root        10  0.0  0.0      0     0 ?        S    Jan05   0:00 [rcu_tasks_trace]
root        11  0.0  0.0      0     0 ?        S    Jan05   2:26 [ksoftirqd/0]
root        12  0.0  0.0      0     0 ?        I    Jan05   3:25 [rcu_sched]
root        13  0.0  0.0      0     0 ?        S    Jan05   0:00 [migration/0]
root        14  0.0  0.0      0     0 ?        S    Jan05   0:00 [cpuhp/0]
root        15  0.0  0.0      0     0 ?        S    Jan05   0:00 [cpuhp/1]
root        16  0.0  0.0      0     0 ?        S    Jan05   0:00 [migration/1]
root        17  0.0  0.0      0     0 ?        S    Jan05   0:01 [ksoftirqd/1]
root        20  0.0  0.0      0     0 ?        S    Jan05   0:00 [cpuhp/2]
root        21  0.0  0.0      0     0 ?        S    Jan05   0:00 [migration/2]
root        22  0.0  0.0      0     0 ?        S    Jan05   0:01 [ksoftirqd/2]
root        25  0.0  0.0      0     0 ?        S    Jan05   0:00 [cpuhp/3]
root        26  0.0  0.0      0     0 ?        S    Jan05   0:00 [migration/3]
root        27  0.0  0.0      0     0 ?        S    Jan05   0:04 [ksoftirqd/3]
root        30  0.0  0.0      0     0 ?        S    Jan05   0:00 [kdevtmpfs]
root        31  0.0  0.0      0     0 ?        I<   Jan05   0:00 [netns]
root        34  0.0  0.0      0     0 ?        S    Jan05   0:00 [kauditd]
root        36  0.0  0.0      0     0 ?        S    Jan05   0:00 [khungtaskd]
root        37  0.0  0.0      0     0 ?        S    Jan05   0:00 [oom_reaper]
root        38  0.0  0.0      0     0 ?        I<   Jan05   0:00 [writeback]
root        39  0.0  0.0      0     0 ?        S    Jan05   0:30 [kcompactd0]
root        59  0.0  0.0      0     0 ?        I<   Jan05   0:00 [kblockd]
root        60  0.0  0.0      0     0 ?        I<   Jan05   0:00 [blkcg_punt_bio]
root        61  0.0  0.0      0     0 ?        S    Jan05   0:00 [watchdogd]
root        64  0.0  0.0      0     0 ?        I<   Jan05   0:00 [rpciod]
root        65  0.0  0.0      0     0 ?        I<   Jan05   0:00 [kworker/u9:0-hci0]
root        66  0.0  0.0      0     0 ?        I<   Jan05   0:00 [xprtiod]
root        67  0.0  0.0      0     0 ?        S    Jan05   0:03 [kswapd0]
root        68  0.0  0.0      0     0 ?        I<   Jan05   0:00 [nfsiod]
root        69  0.0  0.0      0     0 ?        I<   Jan05   0:00 [kthrotld]
root        70  0.0  0.0      0     0 ?        I<   Jan05   0:00 [iscsi_eh]
root        71  0.0  0.0      0     0 ?        I<   Jan05   0:00 [iscsi_destroy]
root        72  0.0  0.0      0     0 ?        I<   Jan05   0:00 [nvme-wq]
root        73  0.0  0.0      0     0 ?        I<   Jan05   0:00 [nvme-reset-wq]
root        74  0.0  0.0      0     0 ?        I<   Jan05   0:00 [nvme-delete-wq]
root        78  0.0  0.0      0     0 ?        I<   Jan05   0:00 [DWC Notificatio]
root        79  0.0  0.0      0     0 ?        I<   Jan05   0:00 [uas]
root        80  0.0  0.0      0     0 ?        S<   Jan05   0:00 [vchiq-slot/0]
root        81  0.0  0.0      0     0 ?        S<   Jan05   0:00 [vchiq-recy/0]
root        82  0.0  0.0      0     0 ?        S<   Jan05   0:00 [vchiq-sync/0]
root        83  0.0  0.0      0     0 ?        I<   Jan05   0:00 [zswap-shrink]
root        87  0.0  0.0      0     0 ?        I<   Jan05   0:00 [sdhci]
root        88  0.0  0.0      0     0 ?        S    Jan05   0:00 [irq/47-mmc0]
root        90  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mmc_complete]
root        94  0.0  0.0      0     0 ?        S    Jan05   0:00 [scsi_eh_0]
root        95  0.0  0.0      0     0 ?        I<   Jan05   0:00 [scsi_tmf_0]
root        96  0.0  0.0      0     0 ?        S    Jan05   0:06 [usb-storage]
root        97  0.0  0.0      0     0 ?        S    Jan05   0:18 [jbd2/mmcblk0p2-]
root        98  0.0  0.0      0     0 ?        I<   Jan05   0:00 [ext4-rsv-conver]
root       102  0.0  0.0      0     0 ?        I<   Jan05   0:00 [ipv6_addrconf]
root       126  0.0  0.0      0     0 ?        I<   Jan05   0:02 [kworker/1:2H-kblockd]
root       127  0.0  0.5  45972 20188 ?        Ss   Jan05   0:30 /lib/systemd/systemd-journald
root       160  0.0  0.1  18604  3976 ?        Ss   Jan05   0:01 /lib/systemd/systemd-udevd
root       197  0.0  0.0      0     0 ?        S    Jan05   0:00 [vchiq-keep/0]
root       199  0.0  0.0      0     0 ?        S<   Jan05   0:00 [SMIO]
root       205  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mmal-vchiq]
root       212  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mmal-vchiq]
root       214  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mmal-vchiq]
root       220  0.0  0.0      0     0 ?        I<   Jan05   0:00 [cfg80211]
root       221  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mmal-vchiq]
root       223  0.0  0.0      0     0 ?        I<   Jan05   0:00 [mmal-vchiq]
root       232  0.0  0.0      0     0 ?        I<   Jan05   0:00 [brcmf_wq/mmc1:0]
root       236  0.0  0.0      0     0 ?        S    Jan05   0:04 [brcmf_wdog/mmc1]
root       239  0.0  0.0      0     0 ?        S    Jan05   0:00 [card1-crtc0]
root       244  0.0  0.0      0     0 ?        S    Jan05   2:52 [v3d_bin]
root       248  0.0  0.0      0     0 ?        S    Jan05   4:06 [v3d_render]
root       250  0.0  0.0      0     0 ?        S    Jan05   0:00 [v3d_tfu]
root       251  0.0  0.0      0     0 ?        S    Jan05   0:00 [v3d_csd]
root       253  0.0  0.0      0     0 ?        S    Jan05   0:00 [v3d_cache_clean]
systemd+   347  0.0  0.1  22384  5548 ?        Ssl  Jan05   0:01 /lib/systemd/systemd-timesyncd
root       369  0.0  0.0   3728  2420 ?        Ss   Jan05   2:14 /sbin/mount.ntfs-3g /dev/sda1 /media/usbdisk2t -o rw,nosuid,nodev,uid=1001,gid=1001,user,exec
root       376  0.0  0.0  25500  2724 ?        Ssl  Jan05   0:06 /usr/sbin/rsyslogd -n -iNONE
avahi      378  0.0  0.0   5888  2924 ?        Ss   Jan05   0:03 avahi-daemon: running [rpi4bmedia.local]
nobody     379  0.0  0.0   4316  2148 ?        Ss   Jan05   0:04 /usr/sbin/thd --triggers /etc/triggerhappy/triggers.d/ --socket /run/thd.socket --user nobody --deviceglob /dev/input/event*
message+   383  0.0  0.0   6952  3808 ?        Ss   Jan05   0:56 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root       388  0.0  0.0  10712  3692 ?        Ss   Jan05   0:02 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
root       391  0.0  0.1  13120  5660 ?        Ss   Jan05   0:24 /lib/systemd/systemd-logind
root       392  0.0  0.1  11720  4604 ?        SNs  Jan05   0:00 /usr/sbin/alsactl -E HOME=/run/alsa -s -n 19 -c rdaemon
root       399  0.0  0.2  63312  8996 ?        Ssl  Jan05   0:04 /usr/lib/udisks2/udisksd
avahi      403  0.0  0.0   5764   252 ?        S    Jan05   0:00 avahi-daemon: chroot helper
root       461  0.0  0.0   2132   104 ?        S    Jan05   0:00 /usr/bin/hciattach /dev/serial1 bcm43xx 3000000 flow -
root       463  0.0  0.0      0     0 ?        I<   Jan05   0:00 [kworker/u9:2-hci0]
root       492  0.0  0.1  39024  6708 ?        Ssl  Jan05   0:05 /usr/lib/policykit-1/polkitd --no-debug
root       510  0.0  0.0   9524  3356 ?        Ss   Jan05   0:00 /usr/lib/bluetooth/bluetoothd
root       529  0.0  0.1  11236  4352 ?        Ss   Jan05   0:06 wpa_supplicant -B -c/etc/wpa_supplicant/wpa_supplicant.conf -iwlan0 -Dnl80211,wext
root       597  0.0  0.0   2964  1956 ?        Ss   Jan05   0:01 /sbin/dhcpcd -q -w
root       599  0.0  0.3 189100 14864 ?        Ss   Jan05   0:33 php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
root       604  0.0  0.2  27796  9452 ?        Ss   Jan05   1:40 /usr/sbin/nmbd --foreground --no-process-group
mosquit+   605  0.0  0.1   8768  4648 ?        Ss   Jan05   3:07 /usr/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf
root       616  0.0  0.0   4452  2192 ?        Ss   Jan05   0:00 /usr/bin/vncserver-x11-serviced -fg
root       620  0.0  0.0   5584  2164 ?        Ss   Jan05   0:00 /usr/sbin/vsftpd /etc/vsftpd.conf
root       624  0.0  0.0      0     0 ?        I<   Jan05   0:00 [cifsiod]
root       625  0.0  0.0      0     0 ?        I<   Jan05   0:00 [smb3decryptd]
root       626  0.0  0.0      0     0 ?        I<   Jan05   0:00 [cifsfileinfoput]
root       627  0.0  0.0      0     0 ?        I<   Jan05   0:00 [cifsoplockd]
root       628  0.0  0.0      0     0 ?        I<   Jan05   0:00 [cifs-dfscache]
root       631  0.0  0.3  34128 13856 ?        Sl   Jan05   1:36 /usr/bin/vncserver-x11-core -service
root       632  0.0  0.1  10688  5616 ?        Ss   Jan05   0:03 /usr/sbin/sshd -D
root       637  0.0  0.0  51212  2316 ?        Ss   Jan05   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data   638  0.0  0.1  52716  7348 ?        S    Jan05   3:42 nginx: worker process
www-data   639  0.0  0.1  51952  6356 ?        S    Jan05   0:10 nginx: worker process
www-data   640  0.0  0.1  51696  6096 ?        S    Jan05   0:02 nginx: worker process
www-data   641  0.0  0.1  51736  5992 ?        S    Jan05   0:01 nginx: worker process
gottsch    653  0.0  0.0   6032  3208 ?        Ss   Jan05   0:00 vncserver :1 -geometry 1280x1024 -depth 24
www-data   655  0.0  0.2 189272 10776 ?        S    Jan05   0:00 php-fpm: pool www
www-data   656  0.0  0.2 189272 10604 ?        S    Jan05   0:00 php-fpm: pool www
root       658  0.0  0.1  17160  6528 ?        S    Jan05   0:00 /usr/bin/Xvnc -rootHelper 1001 4
root       660  0.0  0.4  45016 16580 ?        Ss   Jan05   0:04 /usr/sbin/smbd --foreground --no-process-group
gottsch    677  0.0  0.0   6536  3272 ?        S    Jan05   0:00 /usr/bin/dbus-daemon --session --nofork --address=unix:path=/tmp/.vnc-1001/run/session-5aec533237214c74/bus --nopidfile --nosyslog
gottsch    678  0.0  0.1 351656  6624 ?        Sl   Jan05   0:19 /usr/bin/pulseaudio --daemonize=no
gottsch    679  0.0  0.0   1936   380 ?        S    Jan05   0:00 /bin/sh /etc/vnc/xstartup
root       680  0.0  0.1  41240  5244 ?        S    Jan05   0:00 /usr/sbin/smbd --foreground --no-process-group
root       682  0.0  0.1  41244  4108 ?        S    Jan05   0:00 /usr/sbin/smbd --foreground --no-process-group
rtkit      689  0.0  0.0  23184  2136 ?        SNsl Jan05   0:06 /usr/lib/rtkit/rtkit-daemon
root       692  0.0  0.1  45004  6652 ?        S    Jan05   0:05 /usr/sbin/smbd --foreground --no-process-group
gottsch    695  0.0  0.3  27848 12536 ?        S    Jan05   0:04 /usr/bin/vncserverui virtual 14
gottsch    704  0.0  0.2  50300 10884 ?        Sl   Jan05   0:00 /usr/bin/lxsession -s LXDE-pi -e LXDE
gottsch    719  0.0  0.3  27676 14948 ?        S    Jan05   0:00 /usr/bin/vncserverui -statusicon 5
gottsch    737  0.0  0.0   4492   288 ?        Ss   Jan05   0:02 /usr/bin/ssh-agent x-session-manager
gottsch    749  0.0  0.1  39232  5904 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfsd
gottsch    754  0.0  0.1  54504  4916 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfsd-fuse /tmp/.vnc-1001/run/gvfs -f -o big_writes
gottsch    764  0.0  0.3  57352 13884 ?        S    Jan05   0:00 openbox --config-file /home/gottsch/.config/openbox/lxde-pi-rc.xml
gottsch    766  0.0  0.4  47436 18944 ?        Sl   Jan05   0:00 lxpolkit
gottsch    770  0.0  0.6 142944 25676 ?        Sl   Jan05   0:10 pcmanfm --desktop --profile LXDE-pi
gottsch    775  0.0  0.0   4492   288 ?        Ss   Jan05   0:00 /usr/bin/ssh-agent -s
gottsch    795  0.0  0.6  41576 27084 ?        S    Jan05   0:01 /usr/bin/python3 /usr/share/system-config-printer/applet.py
gottsch    816  0.0  0.1  26436  5204 ?        Sl   Jan05   0:00 /usr/lib/menu-cache/menu-cached /tmp/.vnc-1001/run/menu-cached-:1
gottsch    821  0.0  0.2  93712  9616 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfs-udisks2-volume-monitor
gottsch    828  0.0  0.1  35924  4232 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfs-goa-volume-monitor
gottsch    838  0.0  0.1  37492  4940 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
gottsch    852  0.0  0.1  51976  6288 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfs-afc-volume-monitor
gottsch    859  0.0  0.1  35924  4480 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfs-mtp-volume-monitor
root       868  0.0  0.0   3772  2272 ?        Ss   Jan05   0:02 /usr/sbin/cron -f
root       871  0.0  0.0  27652    80 ?        SLsl Jan05   0:06 /usr/sbin/rngd -r /dev/hwrng
gottsch    892  0.0  0.1  48892  6596 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfsd-trash --spawner :1.4 /org/gtk/gvfs/exec_spaw/0
root       909  0.0  0.1  46716  5912 ?        Ssl  Jan05   0:01 /usr/sbin/lightdm
gottsch    965  0.0  0.1  26800  4184 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfsd-metadata
root      1014  0.0  0.0   5616  2416 tty1     Ss   Jan05   0:00 /bin/login -f
root      1126  0.0  0.1   7308  4336 ?        S    Jan05   0:00 /usr/bin/vncagent service 15
root      1176  0.0  0.1  29900  6236 ?        Sl   Jan05   0:00 lightdm --session-child 14 17
gottsch   1181  0.0  0.1  14692  7372 ?        Ss   Jan05   0:00 /lib/systemd/systemd --user
gottsch   1182  0.0  0.0  16980  3576 ?        S    Jan05   0:00 (sd-pam)
gottsch   1192  0.0  0.2  50368 10932 ?        Ssl  Jan05   0:00 /usr/bin/lxsession -s LXDE-pi -e LXDE
gottsch   1200  0.0  0.0   6540  3460 ?        Ss   Jan05   0:00 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
gottsch   1224  0.0  0.0   4492   288 ?        Ss   Jan05   0:02 /usr/bin/ssh-agent x-session-manager
gottsch   1236  0.0  0.1  39232  5948 ?        Ssl  Jan05   0:00 /usr/lib/gvfs/gvfsd
gottsch   1242  0.0  0.1  53480  4964 ?        Sl   Jan05   0:00 /usr/lib/gvfs/gvfsd-fuse /run/user/1001/gvfs -f -o big_writes
gottsch   1251  0.0  0.3  57328 13984 ?        S    Jan05   0:00 openbox --config-file /home/gottsch/.config/openbox/lxde-pi-rc.xml
gottsch   1255  0.0  0.2  42956  8780 ?        Sl   Jan05   0:03 lxpolkit
gottsch   1258  0.0  0.5 119244 23512 ?        Sl   Jan05   0:00 pcmanfm --desktop --profile LXDE-pi
gottsch   1269  0.0  0.0   4868  1020 ?        S    Jan05   0:00 xcompmgr -aR
gottsch   1276  0.0  0.0   4492   288 ?        Ss   Jan05   0:00 /usr/bin/ssh-agent -s
gottsch   1286  0.0  0.6  41576 27140 ?        S    Jan05   0:00 /usr/bin/python3 /usr/share/system-config-printer/applet.py
gottsch   1291  0.0  0.2 363604  8744 ?        S
ddclient in /var/log/daemon.log

/var/log/nginx/access.log
8.222.203.202 - - [09/Jan/2026:19:43:50 -0800] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:50 -0800] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:51 -0800] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:51 -0800] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:51 -0800] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:51 -0800] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:51 -0800] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:52 -0800] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:52 -0800] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:52 -0800] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:52 -0800] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:53 -0800] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:53 -0800] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:53 -0800] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:53 -0800] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:54 -0800] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:54 -0800] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:55 -0800] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:55 -0800] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:55 -0800] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:56 -0800] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:56 -0800] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:56 -0800] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:56 -0800] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:57 -0800] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:57 -0800] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:57 -0800] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 169 "-" "libredtail-http"
8.222.203.202 - - [09/Jan/2026:19:43:58 -0800] "GET /containers/json HTTP/1.1" 404 169 "-" "libredtail-http"
172.70.42.83 - - [09/Jan/2026:19:44:36 -0800] "HEAD /planets_2020/planets_2020.html HTTP/1.1" 200 0 "-" "Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15"
104.23.253.16 - - [09/Jan/2026:19:44:58 -0800] "GET /Tak_Solar_600D_Scale_Comp_s.jpg HTTP/1.1" 404 199 "http://www.skywatcher.space/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
172.70.115.173 - - [09/Jan/2026:19:44:58 -0800] "GET /ngc891_z1_h2o_asi2600mc_txt.jpg HTTP/1.1" 404 199 "http://www.skywatcher.space/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
104.23.254.106 - - [09/Jan/2026:19:45:00 -0800] "GET /ngc891_z1_h2o_asi2600mc_txt.jpg HTTP/1.1" 404 199 "http://www.skywatcher.space/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
172.68.176.130 - - [09/Jan/2026:19:45:00 -0800] "GET /Tak_Solar_600D_Scale_Comp_s.jpg HTTP/1.1" 404 199 "http://www.skywatcher.space/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
162.158.62.248 - - [09/Jan/2026:19:45:27 -0800] "GET /rel_count_vs_xpos.jpg HTTP/1.1" 404 199 "http://skywatcher.space/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
172.70.93.17 - - [09/Jan/2026:19:45:28 -0800] "GET /rel_count_vs_xpos.jpg HTTP/1.1" 404 199 "http://skywatcher.space/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
172.70.42.82 - - [09/Jan/2026:19:46:13 -0800] "HEAD /venus_merkur/venus_merkur_en.html HTTP/1.1" 200 0 "-" "Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15"
198.211.113.147 - - [09/Jan/2026:19:46:32 -0800] "GET /13inch_cell_fix_04s.jpg HTTP/1.1" 404 199 "http://drgert.dyndns.ws:8000/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3"
14.245.187.127 - - [09/Jan/2026:19:46:33 -0800] "GET http://drgert.dyndns.ws:8000/13inch_cell_fix_04s.jpg HTTP/1.1" 404 199 "http://drgert.dyndns.ws:8000/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3"
172.70.175.66 - - [09/Jan/2026:19:46:35 -0800] "HEAD /CCD_Galery/ngc1976_Mosaic_st10xme.html HTTP/1.1" 200 0 "-" "Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15"
172.71.222.175 - - [09/Jan/2026:19:46:55 -0800] "HEAD /CCD_Galery/ngc6853_st10.html HTTP/1.1" 200 0 "-" "Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15"
157.245.244.99 - - [09/Jan/2026:19:47:12 -0800] "GET /SonneHA_20150613_1815_txt.jpg HTTP/1.1" 404 199 "https://drgert.dyndns.ws/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
187.20.21.2 - - [09/Jan/2026:19:47:14 -0800] "GET http://drgert.dyndns.ws/SonneHA_20150613_1815_txt.jpg HTTP/1.1" 404 199 "https://drgert.dyndns.ws/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
204.76.203.219 - - [09/Jan/2026:19:47:58 -0800] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46"
172.71.190.154 - - [09/Jan/2026:19:49:03 -0800] "HEAD /CCD_Galery/ngc3031_st10xme.html HTTP/1.1" 200 0 "-" "Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15"
162.142.125.197 - - [09/Jan/2026:19:49:36 -0800] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
162.142.125.197 - - [09/Jan/2026:19:49:38 -0800] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03`\xD6?|<\x1D?\xFB\xA8\xE3w\xAC\x987\xFE\xDB\xD1N\xFB\x19\x1F\xDF\xF8m\xD7\xA6iW\x9F\xF0\xDC. \x85%|\x83R\x9D\x02e\x8C\x1CM\x0B\x91\x8Bq\x12\xF9\xF9\xB7j\xA1t\xBE\x01\x16\xB1\xB8\xE76:1<\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 173 "-" "-"
162.142.125.197 - - [09/Jan/2026:19:49:43 -0800] "PRI * HTTP/2.0" 400 173 "-" "-"
162.142.125.197 - - [09/Jan/2026:19:49:45 -0800] "GET /favicon.ico HTTP/1.1" 404 143 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
162.142.125.197 - - [09/Jan/2026:19:49:54 -0800] "GET /favicon.ico HTTP/1.1" 404 143 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
162.142.125.197 - - [09/Jan/2026:19:49:58 -0800] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCC\xEF\xA7u\x9Cc\xA1#7\xF4\xA3\x11\xBB/\xFD\xD3\x87\xF1\x0B\xF2\xE1\xEF\xD3\xA4#\xD1\xC7\xC8o\xDB\x1E\xEB \x9D\xC8\xDC\x22S\xFAJ\x9A\xEC\xC2v\x1F\xDB\xF3\xA21\xA5r\xB7%R\x88e\xF9\xF5`\xDE\xAB-\x9D\x94\xC7\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 173 "-" "-"

/var/log/nginx/error.log
2026/01/09 01:11:13 [crit] 638#638: *28566 SSL_do_handshake() failed (SSL: error:14201044:SSL routines:tls_choose_sigalg:internal error) while SSL handshaking, client: 213.32.122.82, server: 0.0.0.0:443

/var/log/syslog

Failed root login attempts