RPI Status with PHP

system date : Sat May 10 21:17:16 PDT 2025

whoami : www-data

uname -a : Linux rpi4bmedia 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l GNU/Linux

uptime :  21:17:16 up 13 days, 13:36,  2 users,  load average: 0.49, 0.19, 0.12

File systems on RPI
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        29G  8.0G   20G  29% /
devtmpfs        1.8G     0  1.8G   0% /dev
tmpfs           1.9G     0  1.9G   0% /dev/shm
tmpfs           1.9G  130M  1.8G   7% /run
tmpfs           5.0M  4.0K  5.0M   1% /run/lock
tmpfs           1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/mmcblk0p1  253M   49M  204M  20% /boot
/dev/sda1       1.9T   20G  1.9T   2% /media/usbdisk2t
tmpfs           384M  4.0K  384M   1% /run/user/1001

ps aux --sort=-pcpu on RPI
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
gottsch   1255  2.5  2.2 486844 89148 ?        Sl   Apr27 493:23 lxpanel --profile LXDE-pi
gottsch    776  2.4  2.0 478648 79936 ?        Sl   Apr27 476:33 lxpanel --profile LXDE-pi
root      1003  0.4  1.3 158672 54096 tty7     Ssl+ Apr27  87:42 /usr/lib/xorg/Xorg :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
gottsch    664  0.3  0.7 113428 30008 ?        Sl   Apr27  61:44 /usr/bin/Xvnc-core :1 -auth /home/gottsch/.Xauthority -pn -fp /usr/share/vnc/fonts/ -geometry 1280x1024 -depth 24
root         1  0.0  0.2  33852  8140 ?        Ss   Apr27   3:36 /sbin/init splash
root         2  0.0  0.0      0     0 ?        S    Apr27   0:01 [kthreadd]
root         3  0.0  0.0      0     0 ?        I<   Apr27   0:00 [rcu_gp]
root         4  0.0  0.0      0     0 ?        I<   Apr27   0:00 [rcu_par_gp]
root         8  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mm_percpu_wq]
root         9  0.0  0.0      0     0 ?        S    Apr27   0:00 [rcu_tasks_rude_]
root        10  0.0  0.0      0     0 ?        S    Apr27   0:00 [rcu_tasks_trace]
root        11  0.0  0.0      0     0 ?        S    Apr27   5:14 [ksoftirqd/0]
root        12  0.0  0.0      0     0 ?        I    Apr27  11:35 [rcu_sched]
root        13  0.0  0.0      0     0 ?        S    Apr27   0:00 [migration/0]
root        14  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/0]
root        15  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/1]
root        16  0.0  0.0      0     0 ?        S    Apr27   0:01 [migration/1]
root        17  0.0  0.0      0     0 ?        S    Apr27   0:04 [ksoftirqd/1]
root        20  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/2]
root        21  0.0  0.0      0     0 ?        S    Apr27   0:00 [migration/2]
root        22  0.0  0.0      0     0 ?        S    Apr27   0:04 [ksoftirqd/2]
root        25  0.0  0.0      0     0 ?        S    Apr27   0:00 [cpuhp/3]
root        26  0.0  0.0      0     0 ?        S    Apr27   0:00 [migration/3]
root        27  0.0  0.0      0     0 ?        S    Apr27   0:15 [ksoftirqd/3]
root        30  0.0  0.0      0     0 ?        S    Apr27   0:00 [kdevtmpfs]
root        31  0.0  0.0      0     0 ?        I<   Apr27   0:00 [netns]
root        34  0.0  0.0      0     0 ?        S    Apr27   0:00 [kauditd]
root        36  0.0  0.0      0     0 ?        S    Apr27   0:01 [khungtaskd]
root        37  0.0  0.0      0     0 ?        S    Apr27   0:00 [oom_reaper]
root        38  0.0  0.0      0     0 ?        I<   Apr27   0:00 [writeback]
root        39  0.0  0.0      0     0 ?        S    Apr27   1:40 [kcompactd0]
root        59  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kblockd]
root        60  0.0  0.0      0     0 ?        I<   Apr27   0:00 [blkcg_punt_bio]
root        61  0.0  0.0      0     0 ?        S    Apr27   0:00 [watchdogd]
root        64  0.0  0.0      0     0 ?        I<   Apr27   0:00 [rpciod]
root        65  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kworker/u9:0-hci0]
root        66  0.0  0.0      0     0 ?        I<   Apr27   0:00 [xprtiod]
root        67  0.0  0.0      0     0 ?        S    Apr27   0:17 [kswapd0]
root        68  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nfsiod]
root        69  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kthrotld]
root        70  0.0  0.0      0     0 ?        I<   Apr27   0:00 [iscsi_eh]
root        71  0.0  0.0      0     0 ?        I<   Apr27   0:00 [iscsi_destroy]
root        72  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nvme-wq]
root        73  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nvme-reset-wq]
root        74  0.0  0.0      0     0 ?        I<   Apr27   0:00 [nvme-delete-wq]
root        78  0.0  0.0      0     0 ?        I<   Apr27   0:00 [DWC Notificatio]
root        79  0.0  0.0      0     0 ?        I<   Apr27   0:00 [uas]
root        80  0.0  0.0      0     0 ?        S<   Apr27   0:00 [vchiq-slot/0]
root        81  0.0  0.0      0     0 ?        S<   Apr27   0:00 [vchiq-recy/0]
root        82  0.0  0.0      0     0 ?        S<   Apr27   0:00 [vchiq-sync/0]
root        83  0.0  0.0      0     0 ?        I<   Apr27   0:00 [zswap-shrink]
root        87  0.0  0.0      0     0 ?        I<   Apr27   0:00 [sdhci]
root        88  0.0  0.0      0     0 ?        S    Apr27   0:00 [irq/47-mmc0]
root        90  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmc_complete]
root        93  0.0  0.0      0     0 ?        S    Apr27   0:00 [scsi_eh_0]
root        94  0.0  0.0      0     0 ?        I<   Apr27   0:00 [scsi_tmf_0]
root        95  0.0  0.0      0     0 ?        S    Apr27   0:25 [usb-storage]
root        96  0.0  0.0      0     0 ?        S    Apr27   1:00 [jbd2/mmcblk0p2-]
root        97  0.0  0.0      0     0 ?        I<   Apr27   0:00 [ext4-rsv-conver]
root        99  0.0  0.0      0     0 ?        I<   Apr27   0:00 [ipv6_addrconf]
root       126  0.0  0.8  70484 34988 ?        Ss   Apr27   1:31 /lib/systemd/systemd-journald
root       159  0.0  0.0  18604  3824 ?        Ss   Apr27   0:03 /lib/systemd/systemd-udevd
root       198  0.0  0.0      0     0 ?        S    Apr27   0:00 [vchiq-keep/0]
root       199  0.0  0.0      0     0 ?        S<   Apr27   0:00 [SMIO]
root       209  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       216  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       219  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       222  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       227  0.0  0.0      0     0 ?        I<   Apr27   0:00 [mmal-vchiq]
root       233  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cfg80211]
root       242  0.0  0.0      0     0 ?        S    Apr27   9:59 [v3d_bin]
root       244  0.0  0.0      0     0 ?        S    Apr27  14:04 [v3d_render]
root       245  0.0  0.0      0     0 ?        S    Apr27   0:00 [v3d_tfu]
root       246  0.0  0.0      0     0 ?        S    Apr27   0:00 [v3d_csd]
root       247  0.0  0.0      0     0 ?        I<   Apr27   0:00 [brcmf_wq/mmc1:0]
root       248  0.0  0.0      0     0 ?        S    Apr27   0:00 [v3d_cache_clean]
root       251  0.0  0.0      0     0 ?        S    Apr27   0:00 [card1-crtc0]
root       255  0.0  0.0      0     0 ?        S    Apr27   0:07 [brcmf_wdog/mmc1]
systemd+   341  0.0  0.1  22384  5552 ?        Ssl  Apr27   0:04 /lib/systemd/systemd-timesyncd
avahi      374  0.0  0.0   5892  2956 ?        Ss   Apr27   0:28 avahi-daemon: running [rpi4bmedia.local]
root       375  0.0  0.0   3948  2476 ?        Ss   Apr27   7:17 /sbin/mount.ntfs-3g /dev/sda1 /media/usbdisk2t -o rw,nosuid,nodev,uid=1001,gid=1001,user,exec
root       385  0.0  0.0  25500  3036 ?        Ssl  Apr27   0:15 /usr/sbin/rsyslogd -n -iNONE
root       386  0.0  0.2  63316  9236 ?        Ssl  Apr27   0:11 /usr/lib/udisks2/udisksd
message+   387  0.0  0.0   6948  3792 ?        Ss   Apr27   2:57 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
avahi      388  0.0  0.0   5764   252 ?        S    Apr27   0:00 avahi-daemon: chroot helper
nobody     397  0.0  0.0   4316  2052 ?        Ss   Apr27   0:12 /usr/sbin/thd --triggers /etc/triggerhappy/triggers.d/ --socket /run/thd.socket --user nobody --deviceglob /dev/input/event*
root       401  0.0  0.0  10712  3684 ?        Ss   Apr27   0:08 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
root       403  0.0  0.1  13124  5804 ?        Ss   Apr27   1:18 /lib/systemd/systemd-logind
root       409  0.0  0.1  11720  4476 ?        SNs  Apr27   0:00 /usr/sbin/alsactl -E HOME=/run/alsa -s -n 19 -c rdaemon
root       454  0.0  0.0   2132   104 ?        S    Apr27   0:00 /usr/bin/hciattach /dev/serial1 bcm43xx 3000000 flow -
root       456  0.0  0.0      0     0 ?        I<   Apr27   0:00 [kworker/u9:2-hci0]
root       499  0.0  0.1  39032  6624 ?        Ssl  Apr27   0:15 /usr/lib/policykit-1/polkitd --no-debug
root       516  0.0  0.0   9524  3412 ?        Ss   Apr27   0:00 /usr/lib/bluetooth/bluetoothd
root       517  0.0  0.1  11200  4400 ?        Ss   Apr27   0:23 wpa_supplicant -B -c/etc/wpa_supplicant/wpa_supplicant.conf -iwlan0 -Dnl80211,wext
root       592  0.0  0.0      0     0 ?        I    21:09   0:00 [kworker/2:1-events]
root       605  0.0  0.0   2900  1908 ?        Ss   Apr27   0:06 /sbin/dhcpcd -q -w
root       606  0.0  0.0   4452  2208 ?        Ss   Apr27   0:00 /usr/bin/vncserver-x11-serviced -fg
root       608  0.0  0.3 189100 14860 ?        Ss   Apr27   1:46 php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
root       610  0.0  0.2  27796  9328 ?        Ss   Apr27   1:55 /usr/sbin/nmbd --foreground --no-process-group
mosquit+   613  0.0  0.1   8876  5260 ?        Ss   Apr27  10:02 /usr/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf
root       615  0.0  0.3  34112 14004 ?        Sl   Apr27   5:11 /usr/bin/vncserver-x11-core -service
root       626  0.0  0.0   5584  1904 ?        Ss   Apr27   0:00 /usr/sbin/vsftpd /etc/vsftpd.conf
root       632  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifsiod]
root       633  0.0  0.0      0     0 ?        I<   Apr27   0:00 [smb3decryptd]
root       634  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifsfileinfoput]
root       635  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifsoplockd]
root       636  0.0  0.0      0     0 ?        I<   Apr27   0:00 [cifs-dfscache]
root       638  0.0  0.1  10688  5660 ?        Ss   Apr27   0:11 /usr/sbin/sshd -D
root       645  0.0  0.0  51212  2308 ?        Ss   Apr27   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data   646  0.0  0.1  52120  6856 ?        S    Apr27  12:47 nginx: worker process
www-data   648  0.0  0.1  51648  6580 ?        S    Apr27   0:40 nginx: worker process
www-data   651  0.0  0.1  51772  6324 ?        S    Apr27   0:07 nginx: worker process
www-data   655  0.0  0.1  51624  6264 ?        S    Apr27   0:01 nginx: worker process
www-data   660  0.0  0.2 189272 10124 ?        S    Apr27   0:00 php-fpm: pool www
www-data   661  0.0  0.2 189272 10544 ?        S    Apr27   0:00 php-fpm: pool www
gottsch    662  0.0  0.0   6032  3196 ?        Ss   Apr27   0:00 vncserver :1 -geometry 1280x1024 -depth 24
root       666  0.0  0.1  17160  6476 ?        S    Apr27   0:00 /usr/bin/Xvnc -rootHelper 1001 4
root       667  0.0  0.4  45016 16584 ?        Ss   Apr27   0:12 /usr/sbin/smbd --foreground --no-process-group
root       677  0.0  0.1  41240  5244 ?        S    Apr27   0:02 /usr/sbin/smbd --foreground --no-process-group
root       679  0.0  0.1  41244  4108 ?        S    Apr27   0:02 /usr/sbin/smbd --foreground --no-process-group
gottsch    685  0.0  0.0   6544  3296 ?        S    Apr27   0:00 /usr/bin/dbus-daemon --session --nofork --address=unix:path=/tmp/.vnc-1001/run/session-747d3cc35f83483e/bus --nopidfile --nosyslog
gottsch    687  0.0  0.1 351656  6648 ?        Sl   Apr27   1:03 /usr/bin/pulseaudio --daemonize=no
gottsch    689  0.0  0.0   1936   376 ?        S    Apr27   0:00 /bin/sh /etc/vnc/xstartup
rtkit      696  0.0  0.0  23184  2140 ?        SNsl Apr27   0:21 /usr/lib/rtkit/rtkit-daemon
root       697  0.0  0.1  45004  6652 ?        S    Apr27   0:16 /usr/sbin/smbd --foreground --no-process-group
gottsch    702  0.0  0.3  27848 12532 ?        S    Apr27   0:12 /usr/bin/vncserverui virtual 14
gottsch    711  0.0  0.2  50300 10932 ?        Sl   Apr27   0:00 /usr/bin/lxsession -s LXDE-pi -e LXDE
gottsch    726  0.0  0.3  27672 14888 ?        S    Apr27   0:01 /usr/bin/vncserverui -statusicon 5
gottsch    744  0.0  0.0   4492   288 ?        Ss   Apr27   0:07 /usr/bin/ssh-agent x-session-manager
gottsch    756  0.0  0.1  39232  5976 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd
gottsch    761  0.0  0.1  54504  5212 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-fuse /tmp/.vnc-1001/run/gvfs -f -o big_writes
gottsch    770  0.0  0.3  57324 13948 ?        S    Apr27   0:00 openbox --config-file /home/gottsch/.config/openbox/lxde-pi-rc.xml
gottsch    775  0.0  0.4  47408 18784 ?        Sl   Apr27   0:00 lxpolkit
gottsch    777  0.0  0.6 142960 25400 ?        Sl   Apr27   0:30 pcmanfm --desktop --profile LXDE-pi
gottsch    784  0.0  0.0   4492   288 ?        Ss   Apr27   0:00 /usr/bin/ssh-agent -s
gottsch    802  0.0  0.6  41576 27052 ?        S    Apr27   0:01 /usr/bin/python3 /usr/share/system-config-printer/applet.py
gottsch    823  0.0  0.1  26436  5208 ?        Sl   Apr27   0:00 /usr/lib/menu-cache/menu-cached /tmp/.vnc-1001/run/menu-cached-:1
gottsch    828  0.0  0.2  93712  9648 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-udisks2-volume-monitor
gottsch    850  0.0  0.1  35924  4256 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-goa-volume-monitor
gottsch    856  0.0  0.1  37492  4876 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
gottsch    861  0.0  0.1  51976  6328 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-afc-volume-monitor
gottsch    869  0.0  0.1  35924  4424 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfs-mtp-volume-monitor
root       874  0.0  0.0   3772  2324 ?        Ss   Apr27   0:09 /usr/sbin/cron -f
root       880  0.0  0.0  27652    80 ?        SLsl Apr27   0:20 /usr/sbin/rngd -r /dev/hwrng
root       899  0.0  0.1  46716  5932 ?        Ssl  Apr27   0:03 /usr/sbin/lightdm
gottsch    903  0.0  0.1  48784  6376 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-trash --spawner :1.4 /org/gtk/gvfs/exec_spaw/0
gottsch    958  0.0  0.1  26800  4264 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-metadata
root      1004  0.0  0.0   5616  2512 tty1     Ss   Apr27   0:00 /bin/login -f
root      1125  0.0  0.1   7308  4216 ?        S    Apr27   0:00 /usr/bin/vncagent service 15
root      1175  0.0  0.1  29900  6232 ?        Sl   Apr27   0:00 lightdm --session-child 14 17
gottsch   1180  0.0  0.1  14692  7432 ?        Ss   Apr27   0:00 /lib/systemd/systemd --user
gottsch   1181  0.0  0.0  35392  3512 ?        S    Apr27   0:00 (sd-pam)
gottsch   1191  0.0  0.2  50364 11224 ?        Ssl  Apr27   0:00 /usr/bin/lxsession -s LXDE-pi -e LXDE
gottsch   1199  0.0  0.0   6540  3472 ?        Ss   Apr27   0:00 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
gottsch   1223  0.0  0.0   4492   288 ?        Ss   Apr27   0:07 /usr/bin/ssh-agent x-session-manager
root      1224  0.0  0.0      0     0 ?        I    21:12   0:00 [kworker/0:2-events_power_efficient]
gottsch   1234  0.0  0.1  39232  5968 ?        Ssl  Apr27   0:00 /usr/lib/gvfs/gvfsd
gottsch   1239  0.0  0.1  53480  5240 ?        Sl   Apr27   0:00 /usr/lib/gvfs/gvfsd-fuse /run/user/1001/gvfs -f -o big_writes
gottsch   1251  0.0  0.3  57304 13848 ?        S    Apr27   0:00 openbox --config-file /home/gottsch/.config/openbox/lxde-pi-rc.xml
gottsch   1252  0.0  0.2  42956  8864 ?        Sl   Apr27   0:09 lxpolkit
gottsch   1256  0.0  0.6 119216 23820 ?        Sl   Apr27   0:00 pcmanfm --desktop --profile LXDE-pi
gottsch   1262  0.0  0.0   4492   288 ?        Ss   Apr27   0:00 /usr/bin/ssh-agent -s
gottsch   1267  0.0  0.0   4868  1044 ?        S    Apr27   0:00 xcompmgr -aR
gottsch   1280  0.0  0.6  41576 27212 ?        S    Apr27   0:00 /usr/bin/python3 /usr/share/system-config-printer/applet.py
gottsch   1285  0.0  0.2 363604  8672 ?        S
ddclient in /var/log/daemon.log

/var/log/nginx/access.log
45.148.10.42 - - [10/May/2025:20:10:37 -0700] "GET /docker-compose.prod.yml HTTP/1.1" 404 143 "-" "l9explore/1.2.2"
154.81.156.10 - - [10/May/2025:20:15:10 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
69.164.217.245 - - [10/May/2025:20:17:37 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 zgrab/0.x"
170.106.11.6 - - [10/May/2025:20:22:31 -0700] "GET /st10_pentax67/st10_pentax67_en.html HTTP/1.1" 200 1495 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
143.198.53.85 - - [10/May/2025:20:24:04 -0700] "GET /ab2g HTTP/1.1" 404 143 "-" "Mozilla/5.0 zgrab/0.x"
143.198.53.85 - - [10/May/2025:20:24:04 -0700] "GET /ab2h HTTP/1.1" 404 143 "-" "Mozilla/5.0 zgrab/0.x"
143.198.53.85 - - [10/May/2025:20:24:05 -0700] "GET /alive.php HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET / HTTP/1.1" 400 673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET /t4 HTTP/1.1" 400 271 "-" "Mozilla/5.0"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET /t4 HTTP/1.1" 404 143 "-" "Mozilla/5.0"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET /favicon.ico HTTP/1.1" 400 673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET /favicon.ico HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
143.198.53.85 - - [10/May/2025:20:24:06 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 10.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
143.198.53.85 - - [10/May/2025:20:24:07 -0700] "GET /teorema505?t=1 HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
112.86.225.209 - - [10/May/2025:20:25:33 -0700] "GET / HTTP/1.1" 200 4541 "-" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)"
154.81.156.10 - - [10/May/2025:20:26:40 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
93.174.93.12 - - [10/May/2025:20:27:54 -0700] "\x16\x03\x02\x01o\x01\x00\x01k\x03\x02RH\xC5\x1A#\xF7:N\xDF\xE2\xB4\x82/\xFF\x09T\x9F\xA7\xC4y\xB0h\xC6\x13\x8C\xA4\x1C=\x22\xE1\x1A\x98 \x84\xB4,\x85\xAFn\xE3Y\xBBbhl\xFF(=':\xA9\x82\xD9o\xC8\xA2\xD7\x93\x98\xB4\xEF\x80\xE5\xB9\x90\x00(\xC0" 400 173 "-" "-"
178.211.139.123 - - [10/May/2025:20:29:58 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46"
154.81.156.7 - - [10/May/2025:20:30:33 -0700] "GET / HTTP/1.1" 200 14486 "-" "-"
154.81.156.10 - - [10/May/2025:20:32:44 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
20.65.193.130 - - [10/May/2025:20:35:14 -0700] "GET /manager/html HTTP/1.1" 400 271 "-" "Mozilla/5.0 zgrab/0.x"
43.130.34.74 - - [10/May/2025:20:36:20 -0700] "GET /rc10_technik/rc_10.html HTTP/1.1" 200 5331 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
148.153.56.82 - - [10/May/2025:20:38:45 -0700] "GET /MBtY HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0"
148.153.56.82 - - [10/May/2025:20:38:46 -0700] "GET /caXA HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0"
148.153.56.82 - - [10/May/2025:20:38:46 -0700] "GET /aab8 HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0"
148.153.56.82 - - [10/May/2025:20:38:47 -0700] "GET /jquery-3.3.1.slim.min.js HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0"
148.153.56.82 - - [10/May/2025:20:38:48 -0700] "GET /aab9 HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0"
148.153.56.82 - - [10/May/2025:20:38:48 -0700] "GET /jquery-3.3.2.slim.min.js HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0"
3.255.141.40 - - [10/May/2025:20:42:39 -0700] "GET / HTTP/1.0" 200 14486 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)"
154.81.156.10 - - [10/May/2025:20:43:45 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
47.79.193.43 - - [10/May/2025:20:46:44 -0700] "GET / HTTP/1.1" 200 4541 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; Infinix X6817) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Mobile Safari/537.36"
43.157.168.43 - - [10/May/2025:20:47:13 -0700] "GET /h2o/h2o_en.htm HTTP/1.1" 200 2145 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
154.81.156.10 - - [10/May/2025:20:47:20 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
88.214.25.125 - - [10/May/2025:20:48:04 -0700] "\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 173 "-" "-"
49.51.245.241 - - [10/May/2025:20:49:50 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
64.62.156.127 - - [10/May/2025:20:51:15 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
14.54.193.118 - - [10/May/2025:20:53:59 -0700] "GET / HTTP/1.0" 200 14486 "-" "curl/7.88.1"
121.229.156.73 - - [10/May/2025:20:56:14 -0700] "GET / HTTP/1.1" 200 4541 "-" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)"
64.62.156.125 - - [10/May/2025:20:57:23 -0700] "GET /webui/ HTTP/1.1" 404 143 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
154.81.156.10 - - [10/May/2025:20:59:15 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
170.106.192.3 - - [10/May/2025:21:01:58 -0700] "GET /sun_2019/solar_campaign_2019.html HTTP/1.1" 200 1754 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
64.62.156.127 - - [10/May/2025:21:02:16 -0700] "GET /favicon.ico HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.160 Safari/537.36"
154.81.156.10 - - [10/May/2025:21:02:45 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
185.218.86.4 - - [10/May/2025:21:09:31 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46"
185.218.84.178 - - [10/May/2025:21:09:43 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46"
43.159.128.247 - - [10/May/2025:21:11:42 -0700] "GET /CCD_Galery/m8m20ww_st10xme.html HTTP/1.1" 200 753 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
154.81.156.10 - - [10/May/2025:21:11:55 -0700] "PROPFIND / HTTP/1.1" 405 173 "-" "-"
157.245.115.28 - - [10/May/2025:21:14:03 -0700] "\x00\x0E8\xD1L\xE7\xDE\xA6\xFF\xA7\x91\x00\x00\x00\x00\x00" 400 173 "-" "-"
182.44.2.148 - - [10/May/2025:21:15:30 -0700] "GET / HTTP/1.1" 200 4541 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"

/var/log/nginx/error.log
2025/05/10 13:26:21 [error] 646#646: *45143 directory index of "/media/usbdisk2t/nginx/www/download/" is forbidden, client: 20.171.207.72, server: drgert.dyndns.ws, request: "GET /download/ HTTP/1.1", host: "skywatcher.space"

/var/log/syslog

Failed root login attempts