RPI Status with PHP

system date : Thu Jun  5 13:07:36 PDT 2025

whoami : www-data

uname -a : Linux rpi4bmedia 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l GNU/Linux

uptime :  13:07:36 up 39 days,  5:26,  2 users,  load average: 0.25, 0.17, 0.12

File systems on RPI
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        29G  8.1G   20G  29% /
devtmpfs        1.8G     0  1.8G   0% /dev
tmpfs           1.9G     0  1.9G   0% /dev/shm
tmpfs           1.9G  186M  1.7G  10% /run
tmpfs           5.0M  4.0K  5.0M   1% /run/lock
tmpfs           1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/mmcblk0p1  253M   49M  204M  20% /boot
/dev/sda1       1.9T   20G  1.9T   2% /media/usbdisk2t
tmpfs           384M  4.0K  384M   1% /run/user/1001

ps aux --sort=-pcpu on RPI
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
gottsch   1255  2.9  4.9 592036 194296 ?       Sl   Apr27 1645:03 lxpanel --profile LXDE-pi
gottsch    776  2.6  4.5 577320 178600 ?       Sl   Apr27 1490:00 lxpanel --profile LXDE-pi
root      1003  0.4  1.3 158624 53928 tty7     Ssl+ Apr27 236:55 /usr/lib/xorg/Xorg :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
gottsch    664  0.2  0.7 113428 30008 ?        Sl   Apr27 159:18 /usr/bin/Xvnc-core :1 -auth /home/gottsch/.Xauthority -pn -fp /usr/share/vnc/fonts/ -geometry 1280x1024 -depth 24
root         1  0.0  0.2  33852  8152 ?        Ss   Apr27  10:09 /sbin/init splash
root         2  0.0  0.0      0     0 ?        S    Apr27   0:04 [kthreadd]
root         3  0.0  0.0      0     0 ?        I<   Apr27   0:00 [rcu_gp]
root         4  0.0  0.0      0     0 ?        I<   Apr27   0:00 [rcu_par_gp]
root         8  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mm_percpu_wq]
root         9  0.0  0.0      0     0 ?        S    Apr27   0:00 [rcu_tasks_rude_]
root        10  0.0  0.0      0     0 ?        S    Apr27   0:00 [rcu_tasks_trace]
root        11  0.0  0.0      0     0 ?        S    Apr27  14:26 [ksoftirqd/0]
root        12  0.0  0.0      0     0 ?        I    Apr27  35:08 [rcu_sched]
root        13  0.0  0.0      0     0 ?        S    Apr27   0:01 [migration/0]
root        14  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/0]
root        15  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/1]
root        16  0.0  0.0      0     0 ?        S    Apr27   0:04 [migration/1]
root        17  0.0  0.0      0     0 ?        S    Apr27   0:13 [ksoftirqd/1]
root        20  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/2]
root        21  0.0  0.0      0     0 ?        S    Apr27   0:02 [migration/2]
root        22  0.0  0.0      0     0 ?        S    Apr27   0:13 [ksoftirqd/2]
root        25  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/3]
root        26  0.0  0.0      0     0 ?        S    Apr27   0:01 [migration/3]
root        27  0.0  0.0      0     0 ?        S    Apr27   0:39 [ksoftirqd/3]
root        30  0.0  0.0      0     0 ?        S    Apr27   0:00 [kdevtmpfs]
root        31  0.0  0.0      0     0 ?        I<   Apr27   0:00 [netns]
root        34  0.0  0.0      0     0 ?        S    Apr27   0:00 [kauditd]
root        36  0.0  0.0      0     0 ?        S    Apr27   0:03 [khungtaskd]
root        37  0.0  0.0      0     0 ?        S    Apr27   0:00 [oom_reaper]
root        38  0.0  0.0      0     0 ?        I<   Apr27   0:00 [writeback]
root        39  0.0  0.0      0     0 ?        S    Apr27   4:47 [kcompactd0]
root        59  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kblockd]
root        60  0.0  0.0      0     0 ?        I<   Apr27   0:00 [blkcg_punt_bio]
root        61  0.0  0.0      0     0 ?        S    Apr27   0:00 [watchdogd]
root        64  0.0  0.0      0     0 ?        I<   Apr27   0:00 [rpciod]
root        65  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kworker/u9:0-hci0]
root        66  0.0  0.0      0     0 ?        I<   Apr27   0:00 [xprtiod]
root        67  0.0  0.0      0     0 ?        S    Apr27   0:57 [kswapd0]
root        68  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nfsiod]
root        69  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kthrotld]
root        70  0.0  0.0      0     0 ?        I<   Apr27   0:00 [iscsi_eh]
root        71  0.0  0.0      0     0 ?        I<   Apr27   0:00 [iscsi_destroy]
root        72  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nvme-wq]
root        73  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nvme-reset-wq]
root        74  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nvme-delete-wq]
root        78  0.0  0.0      0     0 ?        I<   Apr27   0:00 [DWC Notificatio]
root        79  0.0  0.0      0     0 ?        I<   Apr27   0:00 [uas]
root        80  0.0  0.0      0     0 ?        S<   Apr27   0:00 [vchiq-slot/0]
root        81  0.0  0.0      0     0 ?        S<   Apr27   0:00 [vchiq-recy/0]
root        82  0.0  0.0      0     0 ?        S<   Apr27   0:00 [vchiq-sync/0]
root        83  0.0  0.0      0     0 ?        I<   Apr27   0:00 [zswap-shrink]
root        87  0.0  0.0      0     0 ?        I<   Apr27   0:00 [sdhci]
root        88  0.0  0.0      0     0 ?        S    Apr27   0:00 [irq/47-mmc0]
root        90  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmc_complete]
root        93  0.0  0.0      0     0 ?        S    Apr27   0:00 [scsi_eh_0]
root        94  0.0  0.0      0     0 ?        I<   Apr27   0:00 [scsi_tmf_0]
root        95  0.0  0.0      0     0 ?        S    Apr27   1:14 [usb-storage]
root        96  0.0  0.0      0     0 ?        S    Apr27   2:56 [jbd2/mmcblk0p2-]
root        97  0.0  0.0      0     0 ?        I<   Apr27   0:00 [ext4-rsv-conver]
root        99  0.0  0.0      0     0 ?        I<   Apr27   0:00 [ipv6_addrconf]
root       126  0.0  0.1  37780  6964 ?        Ss   Apr27   4:25 /lib/systemd/systemd-journald
root       159  0.0  0.0  18604  3824 ?        Ss   Apr27   0:08 /lib/systemd/systemd-udevd
root       198  0.0  0.0      0     0 ?        S    Apr27   0:00 [vchiq-keep/0]
root       199  0.0  0.0      0     0 ?        S<   Apr27   0:00 [SMIO]
root       209  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       216  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       219  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       222  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       227  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       233  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cfg80211]
root       242  0.0  0.0      0     0 ?        S    Apr27  26:36 [v3d_bin]
root       244  0.0  0.0      0     0 ?        S    Apr27  37:21 [v3d_render]
root       245  0.0  0.0      0     0 ?        S    Apr27   0:00 [v3d_tfu]
root       246  0.0  0.0      0     0 ?        S    Apr27   0:00 [v3d_csd]
root       247  0.0  0.0      0     0 ?        I<   Apr27   0:00 [brcmf_wq/mmc1:0]
root       248  0.0  0.0      0     0 ?        S    Apr27   0:00 [v3d_cache_clean]
root       251  0.0  0.0      0     0 ?        S    Apr27   0:00 [card1-crtc0]
root       255  0.0  0.0      0     0 ?        S    Apr27   0:21 [brcmf_wdog/mmc1]
systemd+   341  0.0  0.1  22384  5552 ?        Ssl  Apr27   0:11 /lib/systemd/systemd-timesyncd
avahi      374  0.0  0.0   5892  2956 ?        Ss   Apr27   1:17 avahi-daemon: running [rpi4bmedia.local]
root       375  0.0  0.0   4092  2476 ?        Ss   Apr27  21:46 /sbin/mount.ntfs-3g /dev/sda1 /media/usbdisk2t -o rw,nosuid,nodev,uid=1001,gid=1001,user,exec
root       385  0.0  0.0  25500  3140 ?        Ssl  Apr27   0:44 /usr/sbin/rsyslogd -n -iNONE
root       386  0.0  0.2  63316  9236 ?        Ssl  Apr27   0:33 /usr/lib/udisks2/udisksd
message+   387  0.0  0.0   6948  3792 ?        Ss   Apr27   8:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
avahi      388  0.0  0.0   5764   252 ?        S    Apr27   0:00 avahi-daemon: chroot helper
nobody     397  0.0  0.0   4316  2052 ?        Ss   Apr27   0:37 /usr/sbin/thd --triggers /etc/triggerhappy/triggers.d/ --socket /run/thd.socket --user nobody --deviceglob /dev/input/event*
root       401  0.0  0.0  10712  3684 ?        Ss   Apr27   0:23 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
root       403  0.0  0.1  13124  5804 ?        Ss   Apr27   3:41 /lib/systemd/systemd-logind
root       409  0.0  0.1  11720  4476 ?        SNs  Apr27   0:01 /usr/sbin/alsactl -E HOME=/run/alsa -s -n 19 -c rdaemon
root       454  0.0  0.0   2132   104 ?        S    Apr27   0:00 /usr/bin/hciattach /dev/serial1 bcm43xx 3000000 flow -
root       456  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kworker/u9:2-hci0]
root       499  0.0  0.1  39032  6624 ?        Ssl  Apr27   0:44 /usr/lib/policykit-1/polkitd --no-debug
root       516  0.0  0.0   9524  3412 ?        Ss   Apr27   0:00 /usr/lib/bluetooth/bluetoothd
root       517  0.0  0.1  11200  4400 ?        Ss   Apr27   1:00 wpa_supplicant -B -c/etc/wpa_supplicant/wpa_supplicant.conf -iwlan0 -Dnl80211,wext
root       605  0.0  0.0   3032  1912 ?        Ss   Apr27   0:14 /sbin/dhcpcd -q -w
root       606  0.0  0.0   4452  2208 ?        Ss   Apr27   0:00 /usr/bin/vncserver-x11-serviced -fg
root       608  0.0  0.3 189100 14860 ?        Ss   Apr27   5:04 php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
root       610  0.0  0.2  27796  9372 ?        Ss   Apr27  13:11 /usr/sbin/nmbd --foreground --no-process-group
mosquit+   613  0.0  0.1   8876  5260 ?        Ss   Apr27  28:49 /usr/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf
root       615  0.0  0.3  34112 14016 ?        Sl   Apr27  14:46 /usr/bin/vncserver-x11-core -service
root       626  0.0  0.0   5584  1904 ?        Ss   Apr27   0:00 /usr/sbin/vsftpd /etc/vsftpd.conf
root       632  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifsiod]
root       633  0.0  0.0      0     0 ?        I<   Apr27   0:00 [smb3decryptd]
root       634  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifsfileinfoput]
root       635  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifsoplockd]
root       636  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifs-dfscache]
root       638  0.0  0.1  10688  5660 ?        Ss   Apr27   0:33 /usr/sbin/sshd -D
root       645  0.0  0.2  51468  8380 ?        Ss   Apr27   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data   660  0.0  0.2 189272 10188 ?        S    Apr27   0:01 php-fpm: pool www
www-data   661  0.0  0.2 189272 10608 ?        S    Apr27   0:01 php-fpm: pool www
gottsch    662  0.0  0.0   6032  3196 ?        Ss   Apr27   0:00 vncserver :1 -geometry 1280x1024 -depth 24
root       666  0.0  0.1  17160  6476 ?        S    Apr27   0:00 /usr/bin/Xvnc -rootHelper 1001 4
root       667  0.0  0.4  45016 16584 ?        Ss   Apr27   0:36 /usr/sbin/smbd --foreground --no-process-group
root       677  0.0  0.1  41240  5244 ?        S    Apr27   0:06 /usr/sbin/smbd --foreground --no-process-group
root       679  0.0  0.1  41244  4108 ?        S    Apr27   0:06 /usr/sbin/smbd --foreground --no-process-group
gottsch    685  0.0  0.0   6544  3296 ?        S    Apr27   0:00 /usr/bin/dbus-daemon --session --nofork --address=unix:path=/tmp/.vnc-1001/run/session-747d3cc35f83483e/bus --nopidfile --nosyslog
gottsch    687  0.0  0.1 351656  6648 ?        Sl   Apr27   3:01 /usr/bin/pulseaudio --daemonize=no
gottsch    689  0.0  0.0   1936   376 ?        S    Apr27   0:00 /bin/sh /etc/vnc/xstartup
rtkit      696  0.0  0.0  23184  2140 ?        SNsl Apr27   1:00 /usr/lib/rtkit/rtkit-daemon
root       697  0.0  0.1  45004  6652 ?        S    Apr27   0:47 /usr/sbin/smbd --foreground --no-process-group
gottsch    702  0.0  0.3  27848 12532 ?        S    Apr27   0:35 /usr/bin/vncserverui virtual 14
gottsch    711  0.0  0.2  50300 10932 ?        Sl   Apr27   0:00 /usr/bin/lxsession -s LXDE-pi -e LXDE
gottsch    726  0.0  0.3  27672 14888 ?        S    Apr27   0:04 /usr/bin/vncserverui -statusicon 5
gottsch    744  0.0  0.0   4492   288 ?        Ss   Apr27   0:21 /usr/bin/ssh-agent x-session-manager
www-data   746  0.0  0.1  51972  6852 ?        S    May22  12:41 nginx: worker process
www-data   747  0.0  0.1  52016  7104 ?        S    May22   0:25 nginx: worker process
www-data   748  0.0  0.1  51800  6640 ?        S    May22   0:05 nginx: worker process
www-data   749  0.0  0.1  51800  6732 ?        S    May22   0:02 nginx: worker process
gottsch    756  0.0  0.1  39232  5976 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd
gottsch    761  0.0  0.1  54504  5212 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-fuse /tmp/.vnc-1001/run/gvfs -f -o big_writes
gottsch    770  0.0  0.3  57324 13948 ?        S    Apr27   0:00 openbox --config-file /home/gottsch/.config/openbox/lxde-pi-rc.xml
gottsch    775  0.0  0.4  47408 18784 ?        Sl   Apr27   0:00 lxpolkit
gottsch    777  0.0  0.6 142960 25400 ?        Sl   Apr27   1:23 pcmanfm --desktop --profile LXDE-pi
gottsch    784  0.0  0.0   4492   288 ?        Ss   Apr27   0:00 /usr/bin/ssh-agent -s
gottsch    802  0.0  0.6  41576 27052 ?        S    Apr27   0:01 /usr/bin/python3 /usr/share/system-config-printer/applet.py
gottsch    823  0.0  0.1  26436  5208 ?        Sl   Apr27   0:00 /usr/lib/menu-cache/menu-cached /tmp/.vnc-1001/run/menu-cached-:1
gottsch    828  0.0  0.2  93712  9648 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-udisks2-volume-monitor
gottsch    850  0.0  0.1  35924  4256 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-goa-volume-monitor
gottsch    856  0.0  0.1  37492  4876 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
gottsch    861  0.0  0.1  51976  6328 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-afc-volume-monitor
gottsch    869  0.0  0.1  35924  4424 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-mtp-volume-monitor
root       874  0.0  0.0   3772  2324 ?        Ss   Apr27   0:26 /usr/sbin/cron -f
root       880  0.0  0.0  28676    80 ?        SLsl Apr27   0:58 /usr/sbin/rngd -r /dev/hwrng
root       899  0.0  0.1  46716  5932 ?        Ssl  Apr27   0:10 /usr/sbin/lightdm
gottsch    903  0.0  0.1  48784  6376 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-trash --spawner :1.4 /org/gtk/gvfs/exec_spaw/0
gottsch    958  0.0  0.1  26800  4264 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-metadata
root      1004  0.0  0.0   5616  2512 tty1     Ss   Apr27   0:00 /bin/login -f
root      1125  0.0  0.1   7308  4216 ?        S    Apr27   0:00 /usr/bin/vncagent service 15
root      1175  0.0  0.1  29900  6232 ?        Sl   Apr27   0:00 lightdm --session-child 14 17
gottsch   1180  0.0  0.1  14692  7432 ?        Ss   Apr27   0:00 /lib/systemd/systemd --user
gottsch   1181  0.0  0.0  35392  3512 ?        S    Apr27   0:00 (sd-pam)
gottsch   1191  0.0  0.2  50364 11224 ?        Ssl  Apr27   0:00 /usr/bin/lxsession -s LXDE-pi -e LXDE
gottsch   1199  0.0  0.0   6540  3472 ?        Ss   Apr27   0:00 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
gottsch   1223  0.0  0.0   4492   288 ?        Ss   Apr27   0:21 /usr/bin/ssh-agent x-session-manager
gottsch   1234  0.0  0.1  39232  5968 ?        Ssl  Apr27   0:00 /usr/lib/gvfs/gvfsd
gottsch   1239  0.0  0.1  53480  5240 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-fuse /run/user/1001/gvfs -f -o big_writes
gottsch   1251  0.0  0.3  57304 13848 ?        S    Apr27   0:00 openbox --config-file /home/gottsch/.config/openbox/lxde-pi-rc.xml
gottsch   1252  0.0  0.2  42956  8864 ?        Sl   Apr27   0:27 lxpolkit
gottsch   1256  0.0  0.6 119216 23820 ?        Sl   Apr27   0:00 pcmanfm --desktop --profile LXDE-pi
gottsch   1262  0.0  0.0   4492   288 ?        Ss   Apr27   0:00 /usr/bin/ssh-agent -s
gottsch   1267  0.0  0.0   4868  1044 ?        S    Apr27   0:00 xcompmgr -aR
gottsch   1280  0.0  0.6  41576 27212 ?        S    Apr27   0:00 /usr/bin/python3 /usr/share/system-config-printer/applet.py
gottsch   1285  0.0  0.2 363604  8672 ?        S
ddclient in /var/log/daemon.log

/var/log/nginx/access.log
34.148.69.196 - - [05/Jun/2025:12:53:42 -0700] "HEAD /new HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
34.148.69.196 - - [05/Jun/2025:12:53:42 -0700] "HEAD /main HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
34.148.69.196 - - [05/Jun/2025:12:53:42 -0700] "HEAD /home HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
182.44.5.3 - - [05/Jun/2025:12:53:53 -0700] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:53:59 -0700] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:04 -0700] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:08 -0700] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:14 -0700] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:18 -0700] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:22 -0700] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:22 -0700] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:23 -0700] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:24 -0700] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:27 -0700] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:28 -0700] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:29 -0700] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:31 -0700] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:34 -0700] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:41 -0700] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:54:54 -0700] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:14 -0700] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:18 -0700] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:19 -0700] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:20 -0700] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:21 -0700] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:25 -0700] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:32 -0700] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:55:47 -0700] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:03 -0700] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:09 -0700] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:15 -0700] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:22 -0700] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:25 -0700] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:26 -0700] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:29 -0700] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:34 -0700] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:43 -0700] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:53 -0700] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:57 -0700] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:56:59 -0700] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:57:02 -0700] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:57:12 -0700] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:57:21 -0700] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
182.44.5.3 - - [05/Jun/2025:12:57:23 -0700] "GET /containers/json HTTP/1.1" 404 169 "-" "Custom-AsyncHttpClient"
204.76.203.208 - - [05/Jun/2025:12:59:01 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
152.53.110.98 - - [05/Jun/2025:13:01:13 -0700] "GET /fremont_peak/fremont_peak2006.html HTTP/1.1" 200 1162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4487.528 Safari/537.36"
176.65.148.10 - - [05/Jun/2025:13:04:36 -0700] "GET / HTTP/1.1" 200 14486 "-" "-"
87.255.194.135 - - [05/Jun/2025:13:04:49 -0700] "GET /admin/configs.php HTTP/1.0" 404 169 "-" "xfa1"
47.6.42.48 - - [05/Jun/2025:13:06:48 -0700] "GET /download/imx455_kaf3200me_qe.jpg HTTP/1.1" 200 166941 "https://www.cloudynights.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
204.76.203.208 - - [05/Jun/2025:13:07:16 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"

/var/log/nginx/error.log

/var/log/syslog

Failed root login attempts