VPS 每日巡检报告

2026-05-18 19:04:28 北京时间 · 只读巡检 · SSH 并发最多 5 台

异常 共 11 台:异常 8 台,观察 0 台,正常/在线 3 台。

11登记节点
11SSH 在线
8真正异常
0观察项

真正异常

KR 131.186.27.212

近 24 小时关键错误日志

只读深查摘要
kodemo-in-VLESSReality >> z_direct_outbound]
May 18 10:00:31 instance-20260422-2348 xray[883]: 2026/05/18 10:00:31.175422 from tcp:127.0.0.1:51442 accepted udp:69.171.235.22:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 10:00:31 instance-20260422-2348 xray[883]: 2026/05/18 10:00:31.694320 from 127.0.0.1:51452 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision

==JOURNAL xray.service==
May 16 15:30:48 instance-20260422-2348 xray[883]: 2026/05/16 15:30:48.402464 from 127.0.0.1:49312 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:48 instance-20260422-2348 xray[883]: 2026/05/16 15:30:48.407428 from 127.0.0.1:49350 accepted tcp:registry.npmjs.org:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:48 instance-20260422-2348 xray[883]: 2026/05/16 15:30:48.456298 from 127.0.0.1:49326 accepted tcp:my.ip.cn:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:48 instance-20260422-2348 xray[883]: 2026/05/16 15:30:48.658242 from 127.0.0.1:49330 accepted tcp:perfops.byte-test.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:49 instance-20260422-2348 xray[883]: 2026/05/16 15:30:49.145020 from 223.90.73.156:41705 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:30:49 instance-20260422-2348 xray[883]: 2026/05/16 15:30:49.227707 from 223.90.73.156:41727 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:30:49 instance-20260422-2348 xray[883]: 2026/05/16 15:30:49.402737 from 127.0.0.1:49370 accepted tcp:gitlab.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:49 instance-20260422-2348 xray[883]: 2026/05/16 15:30:49.520859 from 127.0.0.1:49376 accepted tcp:gw.alicdn.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:50 instance-20260422-2348 xray[883]: 2026/05/16 15:30:50.212585 from 223.90.73.156:41728 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:30:50 instance-20260422-2348 xray[883]: 2026/05/16 15:30:50.466708 from 127.0.0.1:49390 accepted tcp:gw.alicdn.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:30:59 instance-20260422-2348 xray[883]: 2026/05/16 15:30:59.176456 from 223.90.73.156:41732 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:30:59 instance-20260422-2348 xray[883]: 2026/05/16 15:30:59.446321 from 127.0.0.1:60122 accepted tcp:gateway.icloud.com.cn:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:32:14 instance-20260422-2348 xray[883]: 2026/05/16 15:32:14.940537 from 223.90.73.156:41928 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:32:15 instance-20260422-2348 xray[883]: 2026/05/16 15:32:15.232548 from 127.0.0.1:33954 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:42:59 instance-20260422-2348 xray[883]: 2026/05/16 15:42:59.122762 from 223.90.73.156:41345 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:42:59 instance-20260422-2348 xray[883]: 2026/05/16 15:42:59.124959 from 223.90.73.156:41346 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:42:59 instance-20260422-2348 xray[883]: 2026/05/16 15:42:59.269046 from tcp:127.0.0.1:36318 accepted udp:69.171.235.22:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 15:42:59 instance-20260422-2348 xray[883]: 2026/05/16 15:42:59.269073 from 127.0.0.1:36302 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 20:05:37 instance-20260422-2348 xray[883]: 2026/05/16 20:05:37.708425 from 223.90.73.156:41481 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 20:05:37 instance-20260422-2348 xray[883]: 2026/05/16 20:05:37.781245 from 223.90.73.156:41485 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 20:05:37 instance-20260422-2348 xray[883]: 2026/05/16 20:05:37.914723 from tcp:127.0.0.1:44930 accepted udp:174.132.167.252:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 16 20:05:37 instance-20260422-2348 xray[883]: 2026/05/16 20:05:37.918241 from 127.0.0.1:44944 accepted tcp:s.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 04:37:47 instance-20260422-2348 xray[883]: 2026/05/17 04:37:47.962685 from 223.90.73.156:41559 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 04:37:48 instance-20260422-2348 xray[883]: 2026/05/17 04:37:48.046807 from 223.90.73.156:41560 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 04:37:48 instance-20260422-2348 xray[883]: 2026/05/17 04:37:48.112562 from tcp:127.0.0.1:48758 accepted udp:69.171.235.22:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 04:37:48 instance-20260422-2348 xray[883]: 2026/05/17 04:37:48.177275 from 127.0.0.1:48766 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 05:23:04 instance-20260422-2348 xray[883]: 2026/05/17 05:23:04.739903 from 223.90.73.156:41100 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 05:23:05 instance-20260422-2348 xray[883]: 2026/05/17 05:23:05.048537 from 223.90.73.156:41105 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 05:23:05 instance-20260422-2348 xray[883]: 2026/05/17 05:23:05.049134 from tcp:127.0.0.1:54464 accepted udp:104.244.42.197:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 05:23:05 instance-20260422-2348 xray[883]: 2026/05/17 05:23:05.607827 from 127.0.0.1:54478 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 07:55:24 instance-20260422-2348 xray[883]: 2026/05/17 07:55:24.580326 from 117.136.104.195:35508 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 07:55:24 instance-20260422-2348 xray[883]: 2026/05/17 07:55:24.590119 from 117.136.104.195:35609 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 07:55:24 instance-20260422-2348 xray[883]: 2026/05/17 07:55:24.741528 from 127.0.0.1:36864 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 07:55:24 instance-20260422-2348 xray[883]: 2026/05/17 07:55:24.864040 from tcp:127.0.0.1:36854 accepted udp:185.45.5.35:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 08:37:47 instance-20260422-2348 xray[883]: 2026/05/17 08:37:47.445599 from 223.90.73.156:41739 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 08:37:47 instance-20260422-2348 xray[883]: 2026/05/17 08:37:47.580528 from 223.90.73.156:41734 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 08:37:47 instance-20260422-2348 xray[883]: 2026/05/17 08:37:47.585692 from 127.0.0.1:60850 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 08:37:47 instance-20260422-2348 xray[883]: 2026/05/17 08:37:47.834650 from tcp:127.0.0.1:60864 accepted udp:69.171.235.22:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 09:22:31 instance-20260422-2348 xray[883]: 2026/05/17 09:22:31.726573 from 223.90.73.156:41765 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 09:22:31 instance-20260422-2348 xray[883]: 2026/05/17 09:22:31.891578 from 223.90.73.156:41754 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 09:22:31 instance-20260422-2348 xray[883]: 2026/05/17 09:22:31.993587 from 127.0.0.1:42588 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 09:22:32 instance-20260422-2348 xray[883]: 2026/05/17 09:22:32.151252 from tcp:127.0.0.1:42600 accepted udp:104.244.42.197:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 10:22:58 instance-20260422-2348 xray[883]: 2026/05/17 10:22:58.029375 from 223.90.73.156:41363 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 10:22:58 instance-20260422-2348 xray[883]: 2026/05/17 10:22:58.159115 from 223.90.73.156:41360 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 10:22:58 instance-20260422-2348 xray[883]: 2026/05/17 10:22:58.312445 from 127.0.0.1:49332 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 10:22:58 instance-20260422-2348 xray[883]: 2026/05/17 10:22:58.410435 from tcp:127.0.0.1:49340 accepted udp:174.132.167.252:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 10:39:21 instance-20260422-2348 xray[883]: 2026/05/17 10:39:21.217858 from 223.90.73.156:41720 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 10:39:21 instance-20260422-2348 xray[883]: 2026/05/17 10:39:21.361360 from 223.90.73.156:41728 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 10:39:21 instance-20260422-2348 xray[883]: 2026/05/17 10:39:21.406469 from tcp:127.0.0.1:58936 accepted udp:104.244.42.197:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 10:39:23 instance-20260422-2348 xray[883]: 2026/05/17 10:39:23.160145 from 127.0.0.1:58946 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 14:38:03 instance-20260422-2348 xray[883]: 2026/05/17 14:38:03.689237 from 223.90.73.156:41805 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 14:38:03 instance-20260422-2348 xray[883]: 2026/05/17 14:38:03.866104 from tcp:127.0.0.1:36656 accepted udp:185.45.5.35:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 14:38:05 instance-20260422-2348 xray[883]: 2026/05/17 14:38:05.028511 from 223.90.73.156:41810 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 14:38:05 instance-20260422-2348 xray[883]: 2026/05/17 14:38:05.278676 from 127.0.0.1:36672 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 19:18:03 instance-20260422-2348 xray[883]: 2026/05/17 19:18:03.113861 from 223.90.73.156:41067 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 19:18:03 instance-20260422-2348 xray[883]: 2026/05/17 19:18:03.375229 from 127.0.0.1:38932 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 19:18:07 instance-20260422-2348 xray[883]: 2026/05/17 19:18:07.257877 from 223.90.73.156:41107 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 19:18:07 instance-20260422-2348 xray[883]: 2026/05/17 19:18:07.393023 from 127.0.0.1:45460 accepted tcp:accounts.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 17 20:25:07 instance-20260422-2348 xray[883]: 2026/05/17 20:25:07.772724 from 223.90.73.156:41699 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 17 20:25:07 instance-20260422-2348 xray[883]: 2026/05/17 20:25:07.913097 from 127.0.0.1:51458 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 04:48:51 instance-20260422-2348 xray[883]: 2026/05/18 04:48:51.974009 from 223.90.73.156:41678 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 04:48:52 instance-20260422-2348 xray[883]: 2026/05/18 04:48:52.004533 from 223.90.73.156:41679 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 04:48:52 instance-20260422-2348 xray[883]: 2026/05/18 04:48:52.269011 from 127.0.0.1:47840 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 04:48:52 instance-20260422-2348 xray[883]: 2026/05/18 04:48:52.333350 from tcp:127.0.0.1:47838 accepted udp:174.132.167.252:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 05:18:57 instance-20260422-2348 xray[883]: 2026/05/18 05:18:57.693824 from 223.90.73.156:41265 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 05:18:57 instance-20260422-2348 xray[883]: 2026/05/18 05:18:57.785289 from 223.90.73.156:41277 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 05:18:57 instance-20260422-2348 xray[883]: 2026/05/18 05:18:57.956747 from 127.0.0.1:41560 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 05:18:57 instance-20260422-2348 xray[883]: 2026/05/18 05:18:57.968208 from tcp:127.0.0.1:41548 accepted udp:174.132.167.252:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 09:19:35 instance-20260422-2348 xray[883]: 2026/05/18 09:19:35.817335 from 171.14.142.133:49216 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 09:19:35 instance-20260422-2348 xray[883]: 2026/05/18 09:19:35.914078 from 171.14.142.133:49224 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 09:19:36 instance-20260422-2348 xray[883]: 2026/05/18 09:19:36.297039 from 127.0.0.1:48942 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 09:19:36 instance-20260422-2348 xray[883]: 2026/05/18 09:19:36.297992 from tcp:127.0.0.1:48938 accepted udp:31.13.92.37:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 10:00:29 instance-20260422-2348 xray[883]: 2026/05/18 10:00:29.072814 from 171.14.142.133:52838 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 10:00:29 instance-20260422-2348 xray[883]: 2026/05/18 10:00:29.111662 from 171.14.142.133:52923 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 10:00:29 instance-20260422-2348 xray[883]: 2026/05/18 10:00:29.387288 from 127.0.0.1:51424 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 10:00:29 instance-20260422-2348 xray[883]: 2026/05/18 10:00:29.424445 from tcp:127.0.0.1:51436 accepted udp:69.171.235.22:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 10:00:30 instance-20260422-2348 xray[883]: 2026/05/18 10:00:30.867869 from 171.14.142.133:53052 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 10:00:30 instance-20260422-2348 xray[883]: 2026/05/18 10:00:30.957997 from 171.14.142.133:53053 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 10:00:31 instance-20260422-2348 xray[883]: 2026/05/18 10:00:31.175422 from tcp:127.0.0.1:51442 accepted udp:69.171.235.22:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision
May 18 10:00:31 instance-20260422-2348 xray[883]: 2026/05/18 10:00:31.694320 from 127.0.0.1:51452 accepted tcp:www.youtube.com:443 [z_direct_outbound] email: 3351cfd9-vless_reality_vision

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                                         
LISTEN 0      511        127.0.0.1:8443       0.0.0.0:*    users:(("nginx",pid=960,fd=7),("nginx",pid=959,fd=7),("nginx",pid=958,fd=7))   
LISTEN 0      4096       127.0.0.1:10443      0.0.0.0:*    users:(("xray",pid=883,fd=4))                                                  
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=960,fd=11),("nginx",pid=959,fd=11),("nginx",pid=958,fd=11))
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=960,fd=10),("nginx",pid=959,fd=10),("nginx",pid=958,fd=10))
LISTEN 0      511          0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=960,fd=8),("nginx",pid=959,fd=8),("nginx",pid=958,fd=8))   
LISTEN 0      511          0.0.0.0:28229      0.0.0.0:*    users:(("nginx",pid=960,fd=9),("nginx",pid=959,fd=9),("nginx",pid=958,fd=9))   
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=923322,fd=3),("systemd",pid=1,fd=170))                      
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=753,fd=15))                                      
LISTEN 0      4096       127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=883,fd=8))                                                  
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=753,fd=17))                                      
LISTEN 0      511        127.0.0.1:8081       0.0.0.0:*    users:(("nginx",pid=960,fd=6),("nginx",pid=959,fd=6),("nginx",pid=958,fd=6))   
LISTEN 0      4096               *:16492            *:*    users:(("xray",pid=883,fd=7))                                                  
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=923322,fd=4),("systemd",pid=1,fd=171))                      

==TOP==
    PID    PPID COMMAND         %CPU %MEM
    861       1 fail2ban-server  0.0  4.1
 923907       1 systemd-journal  0.0  4.0
    374       1 multipathd       0.0  2.8
 289709       1 fwupd            0.0  2.7
    878       1 snapd            0.0  2.2
    883       1 xray             0.0  1.8
    864       1 networkd-dispat  0.0  1.6
   1185     870 gomon            0.0  1.5
   1223     870 oci-wlp          0.0  1.4
 853305       1 agent            1.0  1.3
      1       0 systemd          0.1  1.3
    857       1 iscsid           0.0  1.3
    870       1 agent            0.0  1.2
    869       1 updater          0.0  1.2
1249307       1 systemd          5.4  1.1
    753       1 systemd-resolve  0.0  1.1
    960     958 nginx            0.0  1.1
    959     958 nginx            0.0  1.0
1249437  923322 sshd             0.9  1.0

DE 47.254.140.158

近 24 小时关键错误日志

只读深查摘要
:62104 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:04 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:04.834166 from 171.14.142.168:62106 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:04 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:04.872099 from 171.14.142.168:62107 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:04 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:04.922551 from 171.14.142.168:62108 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:04 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:04.937461 from 171.14.142.168:62109 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.029751 from 171.14.142.168:62111 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.062453 from 171.14.142.168:62110 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.102510 from 127.0.0.1:59168 accepted tcp:149.154.167.92:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.204983 from 171.14.142.168:62112 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.227828 from 127.0.0.1:57962 accepted tcp:google.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.253690 from 127.0.0.1:57972 accepted tcp:149.154.167.92:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.378194 from 127.0.0.1:57994 accepted tcp:firebaseremoteconfig.googleapis.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.446210 from 127.0.0.1:57946 accepted tcp:www.google.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.483088 from 171.14.142.168:62116 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.526969 from 223.90.73.202:37155 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.635033 from 171.14.142.168:62117 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:05 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:05.783694 from 127.0.0.1:58004 accepted tcp:google.ru:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:06 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:06.134536 from 171.14.142.168:62120 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:38:06 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:06.287670 from 127.0.0.1:58012 accepted tcp:149.154.167.92:80 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:06 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:06.438264 from 127.0.0.1:58022 accepted tcp:194.221.250.50:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:06 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:06.593002 from 127.0.0.1:58008 accepted tcp:www.google.ru:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:06 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:06.950505 from 127.0.0.1:59180 accepted tcp:91.108.56.118:80 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:38:07 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:38:07.472308 from 127.0.0.1:57980 accepted tcp:firestore.googleapis.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 12 19:44:49 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:44:49.616463 from 129.146.59.53:59460 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 19:46:14 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 19:46:14.284823 from 106.34.160.46:22594 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 20:19:46 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 20:19:46.327105 from 171.14.142.168:55590 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 20:38:59 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 20:38:59.925295 from 223.90.73.202:37516 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 12 20:39:00 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/12 20:39:00.225945 from 127.0.0.1:40740 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 13 08:31:37 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 08:31:37.828721 from 171.13.62.201:50009 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 13 08:31:38 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 08:31:38.390499 from 127.0.0.1:44910 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 13 09:43:18 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 09:43:18.595184 from 223.104.112.229:40839 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 13 09:43:18 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 09:43:18.890233 from 127.0.0.1:35596 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 13 21:41:31 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 21:41:31.072623 from 223.104.112.229:44657 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 13 21:41:31 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 21:41:31.437456 from 127.0.0.1:49242 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 13 23:10:57 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 23:10:57.219125 from 223.90.73.171:11908 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 13 23:10:57 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 23:10:57.763802 from 127.0.0.1:37420 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 13 23:37:52 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 23:37:52.907223 from 171.13.62.201:58023 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 13 23:37:56 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 23:37:56.880275 from 127.0.0.1:41094 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 13 23:56:11 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/13 23:56:11.969502 from 223.104.112.229:51359 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 14 00:09:44 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/14 00:09:44.547475 from 171.13.62.201:54339 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 14 00:09:44 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/14 00:09:44.894631 from 127.0.0.1:53914 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 14 15:18:08 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/14 15:18:08.164679 from 1.196.225.138:51558 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 14 15:18:08 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/14 15:18:08.517128 from 127.0.0.1:32814 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 15 22:48:19 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/15 22:48:19.527104 from 171.13.63.243:63944 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 15 22:48:20 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/15 22:48:20.941340 from 127.0.0.1:55670 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 16 15:31:06 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 15:31:06.692641 from 171.13.63.243:57061 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:31:07 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 15:31:07.052514 from 127.0.0.1:49356 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 16 15:33:44 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 15:33:44.286865 from 171.13.63.243:57363 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 15:33:45 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 15:33:45.920264 from 127.0.0.1:53376 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 16 20:07:44 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 20:07:44.726092 from 171.13.63.243:56547 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 20:07:48 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 20:07:48.761821 from 127.0.0.1:51582 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 16 21:22:14 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 21:22:14.426256 from 171.13.63.243:61113 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 21:22:14 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 21:22:14.960347 from 127.0.0.1:33464 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 16 23:32:15 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 23:32:15.178558 from 171.13.63.243:52964 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 16 23:32:15 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/16 23:32:15.462560 from 127.0.0.1:52060 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 18 04:25:07 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/18 04:25:07.877807 from 171.13.63.243:51646 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 04:25:08 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/18 04:25:08.206580 from 127.0.0.1:43028 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: 60bc9181-vless_reality_vision
May 18 13:43:09 iZgw8bgfuauyw9zjm1qsftZ xray[1981481]: 2026/05/18 13:43:09.072280 from 139.59.79.33:34320 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]

==STATUS aegis.service==
* aegis.service - Aegis Service
     Loaded: loaded (/etc/systemd/system/aegis.service; enabled; preset: enabled)
     Active: inactive (dead) since Fri 2026-05-15 19:46:41 CST; 2 days ago
   Duration: 34min 13.761s
      Tasks: 7 (limit: 1857)
     Memory: 6.7M (peak: 23.1M swap: 1.1M swap peak: 2.3M)
        CPU: 1min 34.579s
     CGroup: /system.slice/aegis.service
             `-795 /usr/local/aegis/aegis_update/AliYunDunUpdate

May 15 19:46:39 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Starting aegis.service - Aegis Service...
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Control process exited, code=killed, status=9/KILL
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Failed with result 'signal'.
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Unit process 795 (AliYunDunUpdate) remains running after unit stopped.
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Failed to start aegis.service - Aegis Service.

==JOURNAL aegis.service==
May 14 06:06:43 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Found left-over process 795 (AliYunDunUpdate) in control group while starting unit. Ignoring.
May 14 06:06:43 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: This usually indicates unclean termination of a previous run, or service implementation deficiencies.
May 14 06:06:43 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Starting aegis.service - Aegis Service...
May 14 06:06:45 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Control process exited, code=killed, status=9/KILL
May 14 06:06:45 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Failed with result 'signal'.
May 14 06:06:45 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Unit process 795 (AliYunDunUpdate) remains running after unit stopped.
May 14 06:06:45 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Failed to start aegis.service - Aegis Service.
May 14 19:12:11 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Found left-over process 795 (AliYunDunUpdate) in control group while starting unit. Ignoring.
May 14 19:12:11 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: This usually indicates unclean termination of a previous run, or service implementation deficiencies.
May 14 19:12:11 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Starting aegis.service - Aegis Service...
May 14 19:12:13 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Control process exited, code=killed, status=9/KILL
May 14 19:12:13 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Failed with result 'signal'.
May 14 19:12:13 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Unit process 795 (AliYunDunUpdate) remains running after unit stopped.
May 14 19:12:13 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Failed to start aegis.service - Aegis Service.
May 15 06:17:16 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Found left-over process 795 (AliYunDunUpdate) in control group while starting unit. Ignoring.
May 15 06:17:16 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: This usually indicates unclean termination of a previous run, or service implementation deficiencies.
May 15 06:17:16 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Starting aegis.service - Aegis Service...
May 15 06:17:18 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Control process exited, code=killed, status=9/KILL
May 15 06:17:18 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Failed with result 'signal'.
May 15 06:17:18 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Unit process 795 (AliYunDunUpdate) remains running after unit stopped.
May 15 06:17:18 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Failed to start aegis.service - Aegis Service.
May 15 19:46:39 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Found left-over process 795 (AliYunDunUpdate) in control group while starting unit. Ignoring.
May 15 19:46:39 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: This usually indicates unclean termination of a previous run, or service implementation deficiencies.
May 15 19:46:39 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Starting aegis.service - Aegis Service...
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Control process exited, code=killed, status=9/KILL
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Failed with result 'signal'.
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: aegis.service: Unit process 795 (AliYunDunUpdate) remains running after unit stopped.
May 15 19:46:41 iZgw8bgfuauyw9zjm1qsftZ systemd[1]: Failed to start aegis.service - Aegis Service.

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                                                  
LISTEN 0      4096       127.0.0.1:8000       0.0.0.0:*    users:(("rest-server",pid=637571,fd=3))                                                 
LISTEN 0      4096       127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=1981481,fd=7))                                                       
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=1959679,fd=17))                                           
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=1955528,fd=3),("systemd",pid=1,fd=103))                              
LISTEN 0      511          0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=2164999,fd=5),("nginx",pid=2164998,fd=5),("nginx",pid=2164996,fd=5))
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=2164999,fd=7),("nginx",pid=2164998,fd=7),("nginx",pid=2164996,fd=7))
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=1959679,fd=15))                                           
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=1955528,fd=4),("systemd",pid=1,fd=104))                              
LISTEN 0      4096               *:17473            *:*    users:(("xray",pid=1981481,fd=4))                                                       
LISTEN 0      511             [::]:80            [::]:*    users:(("nginx",pid=2164999,fd=6),("nginx",pid=2164998,fd=6),("nginx",pid=2164996,fd=6))
LISTEN 0      511             [::]:443           [::]:*    users:(("nginx",pid=2164999,fd=8),("nginx",pid=2164998,fd=8),("nginx",pid=2164996,fd=8))

==TOP==
    PID    PPID COMMAND         %CPU %MEM
2198942     940 python           0.0  7.6
1964726       1 fail2ban-server  0.0  2.6
2209547       1 fwupd            0.5  2.6
   1305       1 AliYunDunMonito  0.4  2.5
1960132       1 multipathd       0.0  1.6
1959242       1 systemd-journal  0.0  1.6
1981481       1 xray             0.0  1.2
1877092       1 agent            0.4  0.7
      1       0 systemd          0.0  0.6
2209888 1955528 sshd             0.0  0.6
   1285       1 aliyun-service.  0.0  0.6
1964714       1 tuned            0.0  0.6
    940       1 systemd          0.0  0.5
    978       1 AliYunDun        0.1  0.5
2164998 2164996 nginx            0.0  0.5
2164999 2164996 nginx            0.0  0.5
 637571       1 rest-server      0.0  0.5
1964679       1 udisksd          0.0  0.4
1959679       1 systemd-resolve  0.0  0.4

HK 82.158.88.91

近 24 小时关键错误日志

只读深查摘要
k xray[601]: 2026/05/16 12:07:44.437246 from 171.13.63.243:56550 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 12:07:44 serq25t4zyrk3xk xray[601]: 2026/05/16 12:07:44.635999 from 127.0.0.1:49608 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 13:22:14 serq25t4zyrk3xk xray[601]: 2026/05/16 13:22:14.353491 from 171.13.63.243:61114 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 13:22:15 serq25t4zyrk3xk xray[601]: 2026/05/16 13:22:15.937880 from 127.0.0.1:35620 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 15:32:14 serq25t4zyrk3xk xray[601]: 2026/05/16 15:32:14.819125 from 171.13.63.243:52959 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 15:32:14 serq25t4zyrk3xk xray[601]: 2026/05/16 15:32:14.994352 from 127.0.0.1:52362 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 17 20:25:07 serq25t4zyrk3xk xray[601]: 2026/05/17 20:25:07.635046 from 171.13.63.243:51647 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 17 20:25:07 serq25t4zyrk3xk xray[601]: 2026/05/17 20:25:07.803014 from 127.0.0.1:52492 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision

==JOURNAL xray.service==
May 14 15:01:20 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:20.870895 from 171.13.56.143:58630 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:01:20 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:20.924510 from 171.13.56.143:58634 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:01:20 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:20.927686 from 171.13.56.143:58632 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:01:20 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:20.976871 from 171.13.56.143:58635 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:01:21 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:21.065741 from 127.0.0.1:48162 accepted tcp:43.129.139.175:80 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:01:21 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:21.065778 from 127.0.0.1:48188 accepted tcp:124.156.190.203:80 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:01:21 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:21.072804 from 127.0.0.1:48174 accepted tcp:43.129.139.175:80 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:01:21 serq25t4zyrk3xk xray[601]: 2026/05/14 15:01:21.126520 from 127.0.0.1:48202 accepted tcp:91.108.56.154:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:03:38 serq25t4zyrk3xk xray[601]: 2026/05/14 15:03:38.076324 from 171.13.56.143:58663 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:03:38 serq25t4zyrk3xk xray[601]: 2026/05/14 15:03:38.249498 from 127.0.0.1:38506 accepted tcp:91.108.56.154:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:24 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:24.953571 from 171.13.56.143:58685 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:24 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:24.969915 from 171.13.56.143:58689 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:24 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:24.972009 from 171.13.56.143:58687 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:24 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:24.972375 from 171.13.56.143:58686 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:24 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:24.973421 from 171.13.56.143:58690 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:24 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:24.974116 from 171.13.56.143:58688 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:25 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:25.904107 from 171.13.56.143:58691 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:26 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:26.727396 from 171.13.56.143:58692 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:30 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:30.169787 from 171.13.56.143:58708 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:30 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:30.175279 from 171.13.56.143:58707 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:30 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:30.386554 from 171.13.56.143:58706 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:31 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:31.186424 from 171.13.56.143:58704 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:31 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:31.739592 from 171.13.56.143:58710 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:32 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:32.176609 from 171.13.56.143:58711 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:32 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:32.304988 from 171.13.56.143:58705 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:33 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:33.336029 from 171.13.56.143:58709 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:35 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:35.602383 from 127.0.0.1:54956 accepted tcp:nicegram.cloud:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:35 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:35.974102 from 171.13.56.143:58713 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:35 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:35.979080 from 171.13.56.143:58714 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:35 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:35.979968 from 171.13.56.143:58716 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:36 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:36.169577 from 171.13.56.143:58715 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:37 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:37.075450 from 171.13.56.143:58712 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:38 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:38.167174 from 171.13.56.143:58717 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:40 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:40.982910 from 171.13.56.143:58737 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:41 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:41.098013 from 171.13.56.143:58724 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:41 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:41.198929 from 171.13.56.143:58736 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:41 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:41.309227 from 171.13.56.143:58730 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:41 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:41.983944 from 171.13.56.143:58739 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:42 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:42.184547 from 171.13.56.143:58743 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:42 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:42.199441 from 171.13.56.143:58740 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:42 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:42.985428 from 171.13.56.143:58744 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:43 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:43.089417 from 171.13.56.143:58742 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:43 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:43.184262 from 171.13.56.143:58741 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:43 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:43.328010 from 127.0.0.1:38258 accepted tcp:91.108.56.154:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:44 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:44.969776 from 171.13.56.143:58788 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:44 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:44.972864 from 171.13.56.143:58782 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.151605 from 127.0.0.1:38270 accepted tcp:149.154.175.54:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.158809 from 171.13.56.143:58779 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.164549 from 171.13.56.143:58781 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.166372 from 171.13.56.143:58780 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.167107 from 171.13.56.143:58774 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.169572 from 171.13.56.143:58775 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.185940 from 171.13.56.143:58784 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.197637 from 171.13.56.143:58777 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.279551 from 127.0.0.1:38330 accepted tcp:91.108.56.154:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.305176 from tcp:127.0.0.1:38212 accepted udp:142.250.69.174:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:45 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:45.978505 from 171.13.56.143:58778 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:46 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:46.963064 from 127.0.0.1:38352 accepted tcp:91.108.56.154:80 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:47 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:47.284077 from 171.13.56.143:58791 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:47 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:47.368213 from 171.13.56.143:58776 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:47 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:47.374378 from 171.13.56.143:58785 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:49 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:49.115283 from 171.13.56.143:58789 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:49 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:49.138392 from 171.13.56.143:58786 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:56 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:56.378259 from 171.13.56.143:58787 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 14 15:04:57 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:57.014415 from 127.0.0.1:38292 accepted tcp:149.154.165.111:5222 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 14 15:04:59 serq25t4zyrk3xk xray[601]: 2026/05/14 15:04:59.027304 from 127.0.0.1:38344 accepted tcp:149.154.175.58:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 15 14:48:19 serq25t4zyrk3xk xray[601]: 2026/05/15 14:48:19.398224 from 171.13.63.243:63941 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 15 14:48:19 serq25t4zyrk3xk xray[601]: 2026/05/15 14:48:19.619970 from 127.0.0.1:41270 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 07:31:05 serq25t4zyrk3xk xray[601]: 2026/05/16 07:31:05.384109 from 171.13.63.243:57058 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 07:31:05 serq25t4zyrk3xk xray[601]: 2026/05/16 07:31:05.542553 from 127.0.0.1:46752 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 07:33:43 serq25t4zyrk3xk xray[601]: 2026/05/16 07:33:43.999176 from 171.13.63.243:57358 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 07:33:44 serq25t4zyrk3xk xray[601]: 2026/05/16 07:33:44.178319 from 127.0.0.1:41566 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 12:07:44 serq25t4zyrk3xk xray[601]: 2026/05/16 12:07:44.437246 from 171.13.63.243:56550 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 12:07:44 serq25t4zyrk3xk xray[601]: 2026/05/16 12:07:44.635999 from 127.0.0.1:49608 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 13:22:14 serq25t4zyrk3xk xray[601]: 2026/05/16 13:22:14.353491 from 171.13.63.243:61114 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 13:22:15 serq25t4zyrk3xk xray[601]: 2026/05/16 13:22:15.937880 from 127.0.0.1:35620 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 16 15:32:14 serq25t4zyrk3xk xray[601]: 2026/05/16 15:32:14.819125 from 171.13.63.243:52959 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 16 15:32:14 serq25t4zyrk3xk xray[601]: 2026/05/16 15:32:14.994352 from 127.0.0.1:52362 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision
May 17 20:25:07 serq25t4zyrk3xk xray[601]: 2026/05/17 20:25:07.635046 from 171.13.63.243:51647 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality -> z_direct_outbound]
May 17 20:25:07 serq25t4zyrk3xk xray[601]: 2026/05/17 20:25:07.803014 from 127.0.0.1:52492 accepted tcp:www.gstatic.com:443 [z_direct_outbound] email: e90ce5c3-vless_reality_vision

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                                         
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=634,fd=3),("systemd",pid=1,fd=117))                         
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=340,fd=17))                                      
LISTEN 0      511        127.0.0.1:8443       0.0.0.0:*    users:(("nginx",pid=626,fd=7),("nginx",pid=625,fd=7),("nginx",pid=623,fd=7))   
LISTEN 0      4096       127.0.0.1:10443      0.0.0.0:*    users:(("xray",pid=601,fd=4))                                                  
LISTEN 0      511          0.0.0.0:19740      0.0.0.0:*    users:(("nginx",pid=626,fd=8),("nginx",pid=625,fd=8),("nginx",pid=623,fd=8))   
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=626,fd=10),("nginx",pid=625,fd=10),("nginx",pid=623,fd=10))
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=626,fd=9),("nginx",pid=625,fd=9),("nginx",pid=623,fd=9))   
LISTEN 0      4096       127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=601,fd=8))                                                  
LISTEN 0      511        127.0.0.1:8081       0.0.0.0:*    users:(("nginx",pid=626,fd=6),("nginx",pid=625,fd=6),("nginx",pid=623,fd=6))   
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=340,fd=15))                                      
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=634,fd=4),("systemd",pid=1,fd=118))                         
LISTEN 0      4096               *:18661            *:*    users:(("xray",pid=601,fd=7))                                                  

==TOP==
    PID    PPID COMMAND         %CPU %MEM
    130       1 systemd-journal  0.0  9.6
    586       1 fail2ban-server  0.1  4.3
    601       1 xray             0.1  1.6
    594       1 snapd            0.0  1.5
    195       1 multipathd       0.0  1.3
    657       1 unattended-upgr  0.0  1.0
      1       0 systemd          0.1  0.7
1097848       1 agent            1.0  0.6
    340       1 systemd-resolve  0.0  0.6
    625     623 nginx            0.0  0.5
    660       1 systemd          0.0  0.5
    626     623 nginx            0.0  0.5
1517623     634 sshd             1.1  0.5
    596       1 systemd-logind   0.0  0.4
    529       1 systemd-network  0.0  0.4
    634       1 sshd             0.0  0.4
    343       1 systemd-timesyn  0.0  0.3
  92990       1 polkitd          0.0  0.3
    200       1 systemd-udevd    0.0  0.3

TK 103.232.213.10

近 24 小时关键错误日志

只读深查摘要
1 from 171.14.142.133:57642 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:01:42 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:42.507782 from 127.0.0.1:59404 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:01:43 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:43.712409 from 171.14.142.133:57644 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:01:43 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:43.910884 from 127.0.0.1:59416 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:01:48 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:48.671374 from 171.14.142.133:57646 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:01:48 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:48.880761 from 127.0.0.1:59432 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:01:54 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:54.017500 from 171.14.142.133:57649 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:01:54 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:54.300161 from 127.0.0.1:34454 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:01:57 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:57.135856 from 171.14.142.133:57651 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:01:57 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:01:57.219230 from 127.0.0.1:34460 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:03 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:03.034325 from 171.14.142.133:57655 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:03 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:03.123113 from 127.0.0.1:51206 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:09 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:09.290061 from 171.14.142.133:57662 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:09 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:09.407767 from 127.0.0.1:51222 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:10 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:10.574480 from 171.14.142.133:57666 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:10 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:10.669280 from 127.0.0.1:36106 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:18 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:18.085512 from 171.14.142.133:57676 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:18 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:18.175308 from 127.0.0.1:36118 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:23 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:23.613531 from 171.14.142.133:57680 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:23 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:23.694009 from 127.0.0.1:50108 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:24 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:24.147133 from 171.14.142.133:57682 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:24 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:24.246190 from 127.0.0.1:50120 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:31 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:31.937359 from 171.14.142.133:57687 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:32 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:32.035995 from 127.0.0.1:40914 accepted tcp:array815.prod.do.dsp.mp.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:32 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:32.076011 from 171.14.142.133:57689 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:32 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:32.271087 from 127.0.0.1:40930 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:38 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:38.272514 from 171.14.142.133:57694 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:38 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:38.373246 from 127.0.0.1:40936 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:39 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:39.260546 from 171.14.142.133:57698 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:39 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:39.359398 from 127.0.0.1:40940 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:47 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:47.027082 from 171.14.142.133:57704 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:47 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:47.106419 from 127.0.0.1:52030 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:52 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:52.945573 from 171.14.142.133:57706 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:53 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:53.192121 from 127.0.0.1:55186 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:02:54 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:54.542459 from 171.14.142.133:57708 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:02:54 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:02:54.653069 from 127.0.0.1:55200 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:01 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:01.201262 from 171.14.142.133:57712 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:01 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:01.299824 from 127.0.0.1:60036 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:03 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:03.502328 from 171.14.142.133:57715 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:03 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:03.583089 from 127.0.0.1:60042 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:07 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:07.956747 from 171.14.142.133:57721 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:08 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:08.051692 from 127.0.0.1:60046 accepted tcp:my.microsoftpersonalcontent.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:08 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:08.631197 from 171.14.142.133:57725 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:08 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:08.718174 from 127.0.0.1:60048 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:08 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:08.793561 from 171.14.142.133:57719 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:08 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:08.901017 from 127.0.0.1:60060 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:15 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:15.677622 from 171.14.142.133:57730 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:15 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:15.770601 from 127.0.0.1:59132 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:21 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:21.889545 from 171.14.142.133:54376 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:21 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:21.988919 from 127.0.0.1:35870 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:23 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:23.113736 from 171.14.142.133:54379 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:23 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:23.206184 from 127.0.0.1:35884 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:29 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:29.887228 from 171.14.142.133:54382 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:29 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:29.987738 from 127.0.0.1:59544 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:37 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:37.360887 from 171.14.142.133:54388 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:37 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:37.457083 from 127.0.0.1:59560 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:37 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:37.987110 from 171.14.142.133:54391 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:38 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:38.075682 from 127.0.0.1:59562 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:46 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:46.602637 from 171.14.142.133:54397 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:46 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:46.689001 from 127.0.0.1:34538 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:53 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:53.078408 from 171.14.142.133:54400 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:53 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:53.174415 from 127.0.0.1:51840 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:53 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:53.606883 from 171.14.142.133:54402 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:53 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:53.809350 from 127.0.0.1:51846 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:03:58 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:58.894941 from 171.14.142.133:54404 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:03:58 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:03:58.991690 from 127.0.0.1:51854 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:06 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:06.755344 from 171.14.142.133:54410 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:06 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:06.853412 from 127.0.0.1:46624 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:07 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:07.851594 from 171.14.142.133:54413 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:07 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:07.939132 from 127.0.0.1:46640 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:14 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:14.413204 from 171.14.142.133:54419 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:14 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:14.511365 from 127.0.0.1:43854 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:21 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:21.579235 from 171.14.142.133:54422 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:21 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:21.683014 from 127.0.0.1:36768 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:21 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:21.729699 from 171.14.142.133:54424 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:21 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:21.845382 from 127.0.0.1:36782 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:28 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:28.804549 from 171.14.142.133:54427 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:29 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:29.338166 from 127.0.0.1:36794 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision
May 18 11:04:35 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:35.666224 from 171.14.142.133:54432 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
May 18 11:04:35 jppro1-2023101300230338 xray[1503571]: 2026/05/18 11:04:35.755670 from 127.0.0.1:39972 accepted tcp:mobile.events.data.microsoft.com:443 [z_direct_outbound] email: 60085b80-vless_reality_vision

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                    
LISTEN 0      511          0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=135055,fd=6),("nginx",pid=507,fd=6))  
LISTEN 0      4096       127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=1503571,fd=7))                         
LISTEN 0      511        127.0.0.1:41443      0.0.0.0:*    users:(("nginx",pid=135055,fd=11),("nginx",pid=507,fd=11))
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=418,fd=14))                 
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=135055,fd=7),("nginx",pid=507,fd=7))  
LISTEN 0      4096       127.0.0.1:10443      0.0.0.0:*    users:(("xray",pid=1503571,fd=6))                         
LISTEN 0      511          0.0.0.0:41756      0.0.0.0:*    users:(("nginx",pid=135055,fd=9),("nginx",pid=507,fd=9))  
LISTEN 0      511             [::]:80            [::]:*    users:(("nginx",pid=135055,fd=8),("nginx",pid=507,fd=8))  
LISTEN 0      4096               *:22               *:*    users:(("systemd",pid=1,fd=133))                          
LISTEN 0      4096               *:23007            *:*    users:(("xray",pid=1503571,fd=3))                         
LISTEN 0      511             [::]:41756         [::]:*    users:(("nginx",pid=135055,fd=10),("nginx",pid=507,fd=10))

==TOP==
    PID    PPID COMMAND         %CPU %MEM
1638866     536 python           0.0 12.9
    340       1 multipathd       0.0  2.7
1503571       1 xray             0.0  2.7
1024327       1 fail2ban-server  0.0  1.6
1390398       1 agent            0.3  1.2
1656874       1 sshd             0.5  1.1
      1       0 systemd          0.0  1.0
 135055     507 nginx            0.0  0.9
1434609       1 systemd-journal  0.0  0.9
    536       1 systemd          0.0  0.8
    484       1 systemd-logind   0.0  0.4
    481       1 rsyslogd         0.0  0.4
    418       1 systemd-resolve  0.0  0.4
    491       1 vnstatd          0.0  0.3
1656913 1656874 bash             0.0  0.3
    465       1 networkd-dispat  0.0  0.3
1656948 1656913 ps               0.0  0.2
 135056     507 nginx            0.0  0.2
  39371       1 chronyd          0.0  0.2

AR 129.146.59.53

近 24 小时关键错误日志

只读深查摘要
^^^^^^^^^^^
May 14 00:04:55 instance-20260423-0914 python[2440511]:   File "/opt/report-center-venv/lib/python3.12/site-packages/flask/app.py", line 902, in dispatch_request
May 14 00:04:55 instance-20260423-0914 python[2440511]:     return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]
May 14 00:04:55 instance-20260423-0914 python[2440511]:            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
May 14 00:04:55 instance-20260423-0914 python[2440511]:   File "/opt/report-center/app.py", line 453, in publish_report
May 14 00:04:55 instance-20260423-0914 python[2440511]:     append_metadata(record)
May 14 00:04:55 instance-20260423-0914 python[2440511]:     ^^^^^^^^^^^^^^^^^
May 14 00:04:55 instance-20260423-0914 python[2440511]:   File "/opt/report-center/app.py", line 390, in refresh_indexes
May 14 00:04:55 instance-20260423-0914 python[2440511]:     source_records = [record for record in records if record.get("source") == source]
May 14 00:04:55 instance-20260423-0914 python[2440511]:   File "/opt/report-center/app.py", line 135, in atomic_write
May 14 00:04:55 instance-20260423-0914 python[2440511]:     fd, tmp = tempfile.mkstemp(prefix=path.name + ".", suffix=".tmp", dir=str(path.parent))
May 14 00:04:55 instance-20260423-0914 python[2440511]:               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
May 14 00:04:55 instance-20260423-0914 python[2440511]:   File "/usr/lib/python3.12/tempfile.py", line 496, in mkstemp
May 14 00:04:55 instance-20260423-0914 python[2440511]:     return _mkstemp_inner(dir, prefix, suffix, flags, output_type)
May 14 00:04:55 instance-20260423-0914 python[2440511]:            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
May 14 00:04:55 instance-20260423-0914 python[2440511]:   File "/usr/lib/python3.12/tempfile.py", line 395, in _mkstemp_inner
May 14 00:04:55 instance-20260423-0914 python[2440511]:     fd = _os.open(file, flags, 0o600)
May 14 00:04:55 instance-20260423-0914 python[2440511]:          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
May 14 00:04:55 instance-20260423-0914 python[2440511]: PermissionError: [Errno 13] Permission denied: '/var/www/reports/sub/index.html.hdqshy05.tmp'
May 14 00:04:55 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:00:04:55 +0800] "POST /api/reports HTTP/1.1" 500 167 "-" "Python-urllib/3.11"
May 14 00:07:54 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [14/May/2026:00:07:54 +0800] "POST /api/reports HTTP/1.1" 201 473 "-" "Python-urllib/3.11"
May 14 00:10:40 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [14/May/2026:00:10:40 +0800] "POST /api/reports HTTP/1.1" 201 401 "-" "Python-urllib/3.11"
May 14 07:01:49 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:07:01:49 +0800] "POST /api/reports HTTP/1.1" 201 445 "-" "Python-urllib/3.11"
May 14 08:20:30 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:08:20:30 +0800] "POST /api/reports HTTP/1.1" 201 420 "-" "Python-urllib/3.11"
May 14 17:31:58 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [14/May/2026:17:31:58 +0800] "POST /api/reports HTTP/1.1" 201 389 "-" "Python-urllib/3.11"
May 14 18:34:48 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:18:34:48 +0800] "POST /api/reports HTTP/1.1" 201 405 "-" "Python-urllib/3.11"
May 14 19:06:36 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [14/May/2026:19:06:36 +0800] "POST /api/reports HTTP/1.1" 201 575 "-" "Python-urllib/3.11"
May 14 19:10:38 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [14/May/2026:19:10:38 +0800] "POST /api/reports HTTP/1.1" 201 615 "-" "Python-urllib/3.11"
May 14 21:26:28 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:21:26:28 +0800] "POST /api/reports HTTP/1.1" 201 580 "-" "Python-urllib/3.11"
May 14 22:43:27 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:22:43:27 +0800] "POST /api/reports HTTP/1.1" 201 623 "-" "Python-urllib/3.11"
May 14 23:52:55 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [14/May/2026:23:52:55 +0800] "POST /api/reports HTTP/1.1" 201 473 "-" "Python-urllib/3.11"
May 15 00:02:07 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [15/May/2026:00:02:07 +0800] "POST /api/reports HTTP/1.1" 201 449 "-" "Python-urllib/3.11"
May 15 00:47:45 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [15/May/2026:00:47:45 +0800] "POST /api/reports HTTP/1.1" 201 657 "-" "Python-urllib/3.11"
May 15 19:03:28 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [15/May/2026:19:03:28 +0800] "POST /api/reports HTTP/1.1" 201 459 "-" "Python-urllib/3.11"
May 15 23:52:16 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [15/May/2026:23:52:15 +0800] "POST /api/reports HTTP/1.1" 201 473 "-" "Python-urllib/3.11"
May 16 00:03:25 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:00:03:25 +0800] "POST /api/reports HTTP/1.1" 201 453 "-" "Python-urllib/3.11"
May 16 00:08:44 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:00:08:44 +0800] "POST /api/reports HTTP/1.1" 201 401 "-" "Python-urllib/3.11"
May 16 11:05:21 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:11:05:21 +0800] "POST /api/reports HTTP/1.1" 201 605 "-" "Python-urllib/3.11"
May 16 17:31:45 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:17:31:45 +0800] "POST /api/reports HTTP/1.1" 201 578 "-" "Python-urllib/3.11"
May 16 19:04:04 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:19:04:04 +0800] "POST /api/reports HTTP/1.1" 201 615 "-" "Python-urllib/3.11"
May 16 20:39:48 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:20:39:48 +0800] "POST /api/reports HTTP/1.1" 201 608 "-" "Python-urllib/3.11"
May 16 21:06:00 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:21:06:00 +0800] "POST /api/reports HTTP/1.1" 201 639 "-" "Python-urllib/3.11"
May 16 21:47:26 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:21:47:26 +0800] "POST /api/reports HTTP/1.1" 201 625 "-" "Python-urllib/3.11"
May 16 21:51:22 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:21:51:22 +0800] "POST /api/reports HTTP/1.1" 201 590 "-" "Python-urllib/3.11"
May 16 22:01:01 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:22:01:01 +0800] "POST /api/reports HTTP/1.1" 201 633 "-" "Python-urllib/3.11"
May 16 22:03:52 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:22:03:52 +0800] "POST /api/reports HTTP/1.1" 201 618 "-" "Python-urllib/3.11"
May 16 22:14:52 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:14:52 +0800] "POST /api/reports HTTP/1.1" 201 552 "-" "Python-urllib/3.11"
May 16 22:21:50 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:21:50 +0800] "POST /api/reports HTTP/1.1" 201 577 "-" "Python-urllib/3.11"
May 16 22:25:49 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:25:49 +0800] "POST /api/reports HTTP/1.1" 201 666 "-" "Python-urllib/3.11"
May 16 22:30:13 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:30:13 +0800] "POST /api/reports HTTP/1.1" 201 621 "-" "Python-urllib/3.11"
May 16 22:30:43 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:30:43 +0800] "POST /api/reports HTTP/1.1" 201 729 "-" "Python-urllib/3.11"
May 16 22:45:26 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:45:26 +0800] "POST /api/reports HTTP/1.1" 201 384 "-" "Python-urllib/3.11"
May 16 22:45:27 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:22:45:27 +0800] "POST /api/reports HTTP/1.1" 201 388 "-" "Python-urllib/3.11"
May 16 22:51:53 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:22:51:53 +0800] "POST /api/reports HTTP/1.1" 201 394 "-" "Python-urllib/3.11"
May 16 22:51:54 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:22:51:54 +0800] "POST /api/reports HTTP/1.1" 201 398 "-" "Python-urllib/3.11"
May 16 23:03:42 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:23:03:42 +0800] "POST /api/reports HTTP/1.1" 201 665 "-" "Python-urllib/3.11"
May 16 23:23:58 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [16/May/2026:23:23:58 +0800] "POST /api/reports HTTP/1.1" 201 700 "-" "Python-urllib/3.11"
May 16 23:51:24 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [16/May/2026:23:51:24 +0800] "POST /api/reports HTTP/1.1" 201 403 "-" "Python-urllib/3.11"
May 17 13:52:35 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [17/May/2026:13:52:35 +0800] "POST /api/reports HTTP/1.1" 201 665 "-" "Python-urllib/3.11"
May 17 17:32:36 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [17/May/2026:17:32:36 +0800] "POST /api/reports HTTP/1.1" 201 537 "-" "Python-urllib/3.11"
May 17 19:03:20 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [17/May/2026:19:03:20 +0800] "POST /api/reports HTTP/1.1" 201 608 "-" "Python-urllib/3.11"
May 17 19:03:52 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [17/May/2026:19:03:52 +0800] "POST /api/reports HTTP/1.1" 201 608 "-" "Python-urllib/3.11"
May 17 19:09:56 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [17/May/2026:19:09:56 +0800] "POST /api/reports HTTP/1.1" 201 713 "-" "Python-urllib/3.11"
May 17 23:52:08 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [17/May/2026:23:52:08 +0800] "POST /api/reports HTTP/1.1" 201 403 "-" "Python-urllib/3.11"
May 18 02:39:30 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [18/May/2026:02:39:30 +0800] "POST /api/reports HTTP/1.1" 201 639 "-" "Python-urllib/3.11"
May 18 02:43:42 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [18/May/2026:02:43:42 +0800] "POST /api/reports HTTP/1.1" 201 572 "-" "Python-urllib/3.11"
May 18 07:01:53 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [18/May/2026:07:01:53 +0800] "POST /api/reports HTTP/1.1" 201 557 "-" "Python-urllib/3.11"
May 18 17:31:55 instance-20260423-0914 python[2440511]: 127.0.0.1 - - [18/May/2026:17:31:55 +0800] "POST /api/reports HTTP/1.1" 201 539 "-" "Python-urllib/3.11"
May 18 19:04:13 instance-20260423-0914 python[2440510]: 127.0.0.1 - - [18/May/2026:19:04:13 +0800] "POST /api/reports HTTP/1.1" 201 532 "-" "Python-urllib/3.11"

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                                                                                                             
LISTEN 0      8192       127.0.0.1:8088       0.0.0.0:*    users:(("docker-proxy",pid=2403921,fd=8))                                                                                                          
LISTEN 0      8192       127.0.0.1:4444       0.0.0.0:*    users:(("docker-proxy",pid=2547547,fd=8))                                                                                                          
LISTEN 0      128        127.0.0.1:5001       0.0.0.0:*    users:(("python",pid=2419573,fd=3))                                                                                                                
LISTEN 0      511        127.0.0.1:5250       0.0.0.0:*    users:(("node",pid=2419921,fd=22))                                                                                                                 
LISTEN 0      2048       127.0.0.1:5260       0.0.0.0:*    users:(("uvicorn",pid=3492636,fd=14))                                                                                                              
LISTEN 0      2048       127.0.0.1:5230       0.0.0.0:*    users:(("python",pid=3434914,fd=3),("python",pid=3434913,fd=3),("python",pid=3434909,fd=3))                                                        
LISTEN 0      2048       127.0.0.1:5240       0.0.0.0:*    users:(("python",pid=2440511,fd=3),("python",pid=2440510,fd=3),("python",pid=2440506,fd=3))                                                        
LISTEN 0      2048       127.0.0.1:5200       0.0.0.0:*    users:(("gunicorn",pid=1467101,fd=3),("gunicorn",pid=1467100,fd=3),("gunicorn",pid=1467097,fd=3))                                                  
LISTEN 0      511        127.0.0.1:5211       0.0.0.0:*    users:(("node",pid=2546828,fd=22))                                                                                                                 
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=1252510,fd=15))                                                                                                      
LISTEN 0      10         127.0.0.1:34683      0.0.0.0:*    users:(("chrome",pid=3564450,fd=77))                                                                                                               
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=1252510,fd=17))                                                                                                      
LISTEN 0      511        127.0.0.1:16060      0.0.0.0:*    users:(("MainThread",pid=3435067,fd=24))                                                                                                           
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=3492886,fd=18),("nginx",pid=3492885,fd=18),("nginx",pid=3492884,fd=18),("nginx",pid=3492883,fd=18),("nginx",pid=2516234,fd=18))
LISTEN 0      4096       127.0.0.1:11434      0.0.0.0:*    users:(("ollama",pid=416112,fd=3))                                                                                                                 
LISTEN 0      511          0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=3492886,fd=16),("nginx",pid=3492885,fd=16),("nginx",pid=3492884,fd=16),("nginx",pid=3492883,fd=16),("nginx",pid=2516234,fd=16))
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=1012073,fd=3),("systemd",pid=1,fd=319))                                                                                         
LISTEN 0      128        127.0.0.1:8645       0.0.0.0:*    users:(("hermes",pid=3435169,fd=18))                                                                                                               
LISTEN 0      128        127.0.0.1:8644       0.0.0.0:*    users:(("hermes",pid=3435160,fd=18))                                                                                                               
LISTEN 0      128        127.0.0.1:8647       0.0.0.0:*    users:(("hermes",pid=3435208,fd=18))                                                                                                               
LISTEN 0      128        127.0.0.1:8646       0.0.0.0:*    users:(("hermes",pid=3435200,fd=18))                                                                                                               
LISTEN 0      128        127.0.0.1:8643       0.0.0.0:*    users:(("hermes",pid=3435153,fd=18))                                                                                                               
LISTEN 0      128        127.0.0.1:8642       0.0.0.0:*    users:(("hermes",pid=3435124,fd=18))                                                                                                               
LISTEN 0      4096       127.0.0.1:8501       0.0.0.0:*    users:(("docker-proxy",pid=2307298,fd=8))                                                                                                          
LISTEN 0      8192       127.0.0.1:8317       0.0.0.0:*    users:(("cli-proxy-api",pid=2563316,fd=10))                                                                                                        
LISTEN 0      8192       127.0.0.1:9090       0.0.0.0:*    users:(("docker-proxy",pid=3435689,fd=8))                                                                                                          
LISTEN 0      511        127.0.0.1:8766       0.0.0.0:*    users:(("node",pid=1231453,fd=21))                                                                                                                 
LISTEN 0      8192       127.0.0.1:8820       0.0.0.0:*    users:(("docker-proxy",pid=3435337,fd=8))                                                                                                          
LISTEN 0      8192       127.0.0.1:25774      0.0.0.0:*    users:(("docker-proxy",pid=2415605,fd=8))                                                                                                          
LISTEN 0      511             [::]:443           [::]:*    users:(("nginx",pid=3492886,fd=19),("nginx",pid=3492885,fd=19),("nginx",pid=3492884,fd=19),("nginx",pid=3492883,fd=19),("nginx",pid=2516234,fd=19))
LISTEN 0      511             [::]:80            [::]:*    users:(("nginx",pid=3492886,fd=17),("nginx",pid=3492885,fd=17),("nginx",pid=3492884,fd=17),("nginx",pid=3492883,fd=17),("nginx",pid=2516234,fd=17))
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=1012073,fd=4),("systemd",pid=1,fd=320))                                                                                         

==TOP==
    PID    PPID COMMAND         %CPU %MEM
2547505 2547481 next-server (v   0.4  2.3
3435295 3435271 python           0.2  2.0
3597573 3435153 MainThread       8.3  0.8
3564450       1 chrome           0.2  0.7
3565132       1 python           0.2  0.7
3435160 3435067 hermes           0.1  0.7
3435124 3435067 hermes           0.1  0.7
3435153 3435067 hermes           0.1  0.6
3435067       1 MainThread       0.0  0.6
3435208 3435067 hermes           0.0  0.5
3564680 3564606 chrome           0.0  0.5
2404855 2403887 searxng worker-  0.0  0.5
2307008       1 dockerd          0.0  0.5
3435169 3435067 hermes           0.0  0.5
3435200 3435067 hermes           0.0  0.5
2307266 2307243 streamlit        0.3  0.4
2475324       1 node             0.0  0.4
3564697 3564606 chrome           0.0  0.4
3564628 3564605 chrome           0.6  0.4

KRB 161.118.130.5

近 24 小时关键错误日志

只读深查摘要
==FAILED==
UNIT LOAD ACTIVE SUB DESCRIPTION

0 loaded units listed.

==STATUS nginx.service==
* nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: enabled)
     Active: active (running) since Sat 2026-05-16 06:36:11 UTC; 2 days ago
       Docs: man:nginx(8)
   Main PID: 761740 (nginx)
      Tasks: 3 (limit: 1035)
     Memory: 5.5M (peak: 7.8M)
        CPU: 2.495s
     CGroup: /system.slice/nginx.service
             |-761740 "nginx: master process /usr/sbin/nginx -g daemon on; master_process on;"
             |-761784 "nginx: worker process"
             `-761785 "nginx: worker process"

May 16 06:36:11 instance-20260429-1226 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
May 16 06:36:11 instance-20260429-1226 systemd[1]: Started nginx.service - A high performance web server and a reverse proxy server.
May 16 06:36:15 instance-20260429-1226 systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
May 16 06:36:15 instance-20260429-1226 nginx[761782]: 2026/05/16 06:36:15 [notice] 761782#761782: signal process started
May 16 06:36:15 instance-20260429-1226 systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.

==JOURNAL nginx.service==
May 16 06:36:11 instance-20260429-1226 systemd[1]: Stopping nginx.service - A high performance web server and a reverse proxy server...
May 16 06:36:11 instance-20260429-1226 systemd[1]: nginx.service: Deactivated successfully.
May 16 06:36:11 instance-20260429-1226 systemd[1]: Stopped nginx.service - A high performance web server and a reverse proxy server.
May 16 06:36:11 instance-20260429-1226 systemd[1]: nginx.service: Consumed 13.142s CPU time, 8.1M memory peak, 0B memory swap peak.
May 16 06:36:11 instance-20260429-1226 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
May 16 06:36:11 instance-20260429-1226 systemd[1]: Started nginx.service - A high performance web server and a reverse proxy server.
May 16 06:36:15 instance-20260429-1226 systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
May 16 06:36:15 instance-20260429-1226 nginx[761782]: 2026/05/16 06:36:15 [notice] 761782#761782: signal process started
May 16 06:36:15 instance-20260429-1226 systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.

==PORTS==
State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess                                                                                  
LISTEN 0      4096   127.0.0.53%lo:53        0.0.0.0:*    users:(("systemd-resolve",pid=681,fd=15))                                               
LISTEN 0      511        127.0.0.1:8443      0.0.0.0:*    users:(("nginx",pid=761785,fd=8),("nginx",pid=761784,fd=8),("nginx",pid=761740,fd=8))   
LISTEN 0      511          0.0.0.0:443       0.0.0.0:*    users:(("nginx",pid=761785,fd=10),("nginx",pid=761784,fd=10),("nginx",pid=761740,fd=10))
LISTEN 0      511          0.0.0.0:443       0.0.0.0:*    users:(("nginx",pid=761785,fd=9),("nginx",pid=761784,fd=9),("nginx",pid=761740,fd=9))   
LISTEN 0      4096      127.0.0.54:53        0.0.0.0:*    users:(("systemd-resolve",pid=681,fd=17))                                               
LISTEN 0      511        127.0.0.1:8081      0.0.0.0:*    users:(("nginx",pid=761785,fd=7),("nginx",pid=761784,fd=7),("nginx",pid=761740,fd=7))   
LISTEN 0      511          0.0.0.0:80        0.0.0.0:*    users:(("nginx",pid=761785,fd=5),("nginx",pid=761784,fd=5),("nginx",pid=761740,fd=5))   
LISTEN 0      4096         0.0.0.0:22        0.0.0.0:*    users:(("sshd",pid=514110,fd=3),("systemd",pid=1,fd=102))                               
LISTEN 0      511             [::]:80           [::]:*    users:(("nginx",pid=761785,fd=6),("nginx",pid=761784,fd=6),("nginx",pid=761740,fd=6))   
LISTEN 0      4096            [::]:22           [::]:*    users:(("sshd",pid=514110,fd=4),("systemd",pid=1,fd=103))                               

==TOP==
    PID    PPID COMMAND         %CPU %MEM
    851       1 fail2ban-server  0.0  4.5
 514977       1 systemd-journal  0.0  3.2
 270510       1 fwupd            0.0  3.1
    375       1 multipathd       0.0  2.8
    868       1 snapd            0.0  2.1
    940       1 unattended-upgr  0.0  2.1
   1158     866 gomon            0.0  1.7
   1199     866 oci-wlp          0.0  1.5
    866       1 agent            0.0  1.4
    906       1 iscsid           0.0  1.3
 444386       1 agent            0.9  1.3
      1       0 systemd          0.0  1.3
    862       1 updater          0.0  1.1
 836073       1 systemd          7.9  1.1
    681       1 systemd-resolve  0.0  1.1
 836200  514110 sshd             1.4  1.1
    888       1 udisksd          0.0  1.0
 761740       1 nginx            0.0  0.9
 761785  761740 nginx            0.0  0.9

US 186.244.244.52

近 24 小时关键错误日志

只读深查摘要
==FAILED==
UNIT LOAD ACTIVE SUB DESCRIPTION

0 loaded units listed.

==STATUS nginx.service==
* nginx.service - LSB: starts the nginx web server
     Loaded: loaded (/etc/init.d/nginx; generated)
     Active: active (running) since Thu 2026-05-07 12:05:32 UTC; 1 week 3 days ago
       Docs: man:systemd-sysv-generator(8)
      Tasks: 6 (limit: 4600)
     Memory: 106.1M (peak: 107.2M)
        CPU: 18.849s
     CGroup: /system.slice/nginx.service
             |-1001 "nginx: master process /www/server/nginx/sbin/nginx -c /www/server/nginx/conf/nginx.conf"
             |-1002 "nginx: worker process"
             |-1003 "nginx: worker process"
             |-1004 "nginx: worker process"
             |-1009 "nginx: worker process"
             `-1017 "nginx: cache manager process"

Notice: journal has been rotated since unit was started, output may be incomplete.

==JOURNAL nginx.service==
-- No entries --

==STATUS docker.service==
* docker.service - Docker Application Container Engine
     Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; preset: enabled)
     Active: active (running) since Thu 2026-05-07 12:05:36 UTC; 1 week 3 days ago
TriggeredBy: * docker.socket
       Docs: https://docs.docker.com
   Main PID: 1148 (dockerd)
      Tasks: 64
     Memory: 117.2M (peak: 260.3M)
        CPU: 6min 42.164s
     CGroup: /system.slice/docker.service
             |-1148 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
             |-1762 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 1455 -container-ip 172.18.0.2 -container-port 1455 -use-listen-fd
             |-1770 /usr/bin/docker-proxy -proto tcp -host-ip :: -host-port 1455 -container-ip 172.18.0.2 -container-port 1455 -use-listen-fd
             |-1793 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 8085 -container-ip 172.18.0.2 -container-port 8085 -use-listen-fd
             |-1801 /usr/bin/docker-proxy -proto tcp -host-ip :: -host-port 8085 -container-ip 172.18.0.2 -container-port 8085 -use-listen-fd
             |-1816 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 8317 -container-ip 172.18.0.2 -container-port 8317 -use-listen-fd
             `-1822 /usr/bin/docker-proxy -proto tcp -host-ip :: -host-port 8317 -container-ip 172.18.0.2 -container-port 8317 -use-listen-fd

Notice: journal has been rotated since unit was started, output may be incomplete.

==JOURNAL docker.service==
-- No entries --

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                                                                                              
LISTEN 0      511          0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=1009,fd=13),("nginx",pid=1004,fd=13),("nginx",pid=1003,fd=13),("nginx",pid=1002,fd=13),("nginx",pid=1001,fd=13))
LISTEN 0      4096         0.0.0.0:8317       0.0.0.0:*    users:(("docker-proxy",pid=1816,fd=7))                                                                                              
LISTEN 0      511          0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=1009,fd=14),("nginx",pid=1004,fd=14),("nginx",pid=1003,fd=14),("nginx",pid=1002,fd=14),("nginx",pid=1001,fd=14))
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=458425,fd=3),("systemd",pid=1,fd=142))                                                                           
LISTEN 0      511          0.0.0.0:888        0.0.0.0:*    users:(("nginx",pid=1009,fd=12),("nginx",pid=1004,fd=12),("nginx",pid=1003,fd=12),("nginx",pid=1002,fd=12),("nginx",pid=1001,fd=12))
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=585,fd=15))                                                                                           
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=585,fd=17))                                                                                           
LISTEN 0      4096         0.0.0.0:1455       0.0.0.0:*    users:(("docker-proxy",pid=1762,fd=7))                                                                                              
LISTEN 0      4096       127.0.0.1:38655      0.0.0.0:*    users:(("containerd",pid=927,fd=12))                                                                                                
LISTEN 0      4096         0.0.0.0:8085       0.0.0.0:*    users:(("docker-proxy",pid=1793,fd=7))                                                                                              
LISTEN 0      4096            [::]:8317          [::]:*    users:(("docker-proxy",pid=1822,fd=7))                                                                                              
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=458425,fd=4),("systemd",pid=1,fd=143))                                                                           
LISTEN 0      4096               *:2058             *:*    users:(("sysmond-bin",pid=324842,fd=4))                                                                                             
LISTEN 0      4096            [::]:1455          [::]:*    users:(("docker-proxy",pid=1770,fd=7))                                                                                              
LISTEN 0      4096            [::]:8085          [::]:*    users:(("docker-proxy",pid=1801,fd=7))                                                                                              

==TOP==
    PID    PPID COMMAND         %CPU %MEM
 992266    1000 python           0.2  3.6
   1148       1 dockerd          0.0  2.2
    927       1 containerd       0.2  1.4
    830       1 fail2ban-server  0.1  1.3
    845       1 snapd            0.0  1.0
 459053       1 systemd-journal  0.0  0.9
 324842  324818 sysmond-bin      0.0  0.9
   1702    1665 CLIProxyAPI      0.0  0.9
   1004    1001 nginx            0.0  0.7
   1009    1001 nginx            0.0  0.7
   1003    1001 nginx            0.0  0.7
   1002    1001 nginx            0.0  0.6
    382       1 multipathd       0.0  0.6
    981       1 unattended-upgr  0.0  0.5
    838       1 networkd-dispat  0.0  0.5
      1       0 systemd          0.3  0.3
    585       1 systemd-resolve  0.0  0.3
 402990       1 agent            1.6  0.3
   1000       1 systemd          0.0  0.2

HKA 38.76.188.244

近 24 小时关键错误日志

只读深查摘要
==FAILED==
UNIT LOAD ACTIVE SUB DESCRIPTION

0 loaded units listed.

==STATUS nginx.service==
* nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: enabled)
     Active: active (running) since Sat 2026-05-16 06:12:12 UTC; 2 days ago
       Docs: man:nginx(8)
    Process: 10414 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
    Process: 10417 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
   Main PID: 10447 (nginx)
      Tasks: 6 (limit: 4600)
     Memory: 10.2M (peak: 16.4M)
        CPU: 24.349s
     CGroup: /system.slice/nginx.service
             |-10447 "nginx: master process /usr/sbin/nginx -g daemon on; master_process on;"
             |-10450 "nginx: worker process"
             |-10451 "nginx: worker process"
             |-10452 "nginx: worker process"
             |-10453 "nginx: worker process"
             `-10454 "nginx: cache manager process"

May 16 06:12:12 ser4062572352 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
May 16 06:12:12 ser4062572352 systemd[1]: Started nginx.service - A high performance web server and a reverse proxy server.

==JOURNAL nginx.service==
May 15 03:07:20 ser4062572352 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
May 15 03:07:21 ser4062572352 systemd[1]: Started nginx.service - A high performance web server and a reverse proxy server.
May 16 06:12:12 ser4062572352 systemd[1]: Stopping nginx.service - A high performance web server and a reverse proxy server...
May 16 06:12:12 ser4062572352 systemd[1]: nginx.service: Deactivated successfully.
May 16 06:12:12 ser4062572352 systemd[1]: Stopped nginx.service - A high performance web server and a reverse proxy server.
May 16 06:12:12 ser4062572352 systemd[1]: nginx.service: Consumed 5.111s CPU time, 14.8M memory peak, 0B memory swap peak.
May 16 06:12:12 ser4062572352 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
May 16 06:12:12 ser4062572352 systemd[1]: Started nginx.service - A high performance web server and a reverse proxy server.

==STATUS docker.service==
* docker.service - Docker Application Container Engine
     Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; preset: enabled)
     Active: active (running) since Fri 2026-05-15 03:07:24 UTC; 3 days ago
TriggeredBy: * docker.socket
       Docs: https://docs.docker.com
   Main PID: 1081 (dockerd)
      Tasks: 12
     Memory: 98.0M (peak: 98.8M)
        CPU: 1min 44.063s
     CGroup: /system.slice/docker.service
             `-1081 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.239063428Z" level=info msg="Loading containers: done."
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.253348891Z" level=info msg="Docker daemon" commit="29.1.3-0ubuntu3~24.04.2" containerd-snapshotter=true storage-driver=overlayfs version=29.1.3
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.253771102Z" level=info msg="Initializing buildkit"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.271532195Z" level=info msg="Completed buildkit initialization"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.288145827Z" level=info msg="Daemon has completed initialization"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.288496818Z" level=info msg="API listen on /run/docker.sock"
May 15 03:07:24 ser4062572352 systemd[1]: Started docker.service - Docker Application Container Engine.
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.601198820Z" level=warning msg="Security options with `:` as a separator are deprecated and will be completely unsupported in 17.04, use `=` instead."
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.663637381Z" level=warning msg="Security options with `:` as a separator are deprecated and will be completely unsupported in 17.04, use `=` instead."
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.872330813Z" level=info msg="sbJoin: gwep4 ''->'', gwep6 ''->''" eid=3a2c07149220 ep=edge-proxy net=host nid=aeb2c6ba6996

==JOURNAL docker.service==
May 15 03:07:22 ser4062572352 systemd[1]: Starting docker.service - Docker Application Container Engine...
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.480404272Z" level=info msg="Starting up"
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.485339651Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider"
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.485787881Z" level=info msg="CDI directory does not exist, skipping: failed to monitor for changes: no such file or directory" dir=/var/run/cdi
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.485893525Z" level=info msg="CDI directory does not exist, skipping: failed to monitor for changes: no such file or directory" dir=/etc/cdi
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.486442059Z" level=info msg="detected 127.0.0.53 nameserver, assuming systemd-resolved, so using resolv.conf: /run/systemd/resolve/resolv.conf"
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.546027098Z" level=info msg="Creating a containerd client" address=/run/containerd/containerd.sock timeout=1m0s
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.553708912Z" level=info msg="Loading containers: start."
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.556950127Z" level=info msg="Starting daemon with containerd snapshotter integration enabled"
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.560340733Z" level=info msg="Restoring containers: start."
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.566182712Z" level=warning msg="failed to determine if container is already mounted" container=82d7425aaa4935f36a30760b7f04db7cc8402e4aea127f1155157d92761d212b
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.581794505Z" level=error msg="error unmounting container" container=93ade3005a1ad640af8924e250d5d54d45685c4b254f2fe2f64a43752b6a879a error="layer not mounted"
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.669947928Z" level=info msg="Deleting nftables IPv4 rules" error="exit status 1"
May 15 03:07:23 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:23.681748911Z" level=info msg="Deleting nftables IPv6 rules" error="exit status 1"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.089198081Z" level=info msg="Removing stale sandbox" cid=93ade3005a1a isRestore=false sid=ad6627987694
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.217878501Z" level=warning msg="error locating sandbox id ad66279876942c38a1914cb42e5f372adb99389134ddf39fdc7b114608a27d28: sandbox ad66279876942c38a1914cb42e5f372adb99389134ddf39fdc7b114608a27d28 not found"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.239063428Z" level=info msg="Loading containers: done."
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.253348891Z" level=info msg="Docker daemon" commit="29.1.3-0ubuntu3~24.04.2" containerd-snapshotter=true storage-driver=overlayfs version=29.1.3
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.253771102Z" level=info msg="Initializing buildkit"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.271532195Z" level=info msg="Completed buildkit initialization"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.288145827Z" level=info msg="Daemon has completed initialization"
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.288496818Z" level=info msg="API listen on /run/docker.sock"
May 15 03:07:24 ser4062572352 systemd[1]: Started docker.service - Docker Application Container Engine.
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.601198820Z" level=warning msg="Security options with `:` as a separator are deprecated and will be completely unsupported in 17.04, use `=` instead."
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.663637381Z" level=warning msg="Security options with `:` as a separator are deprecated and will be completely unsupported in 17.04, use `=` instead."
May 15 03:07:24 ser4062572352 dockerd[1081]: time="2026-05-15T03:07:24.872330813Z" level=info msg="sbJoin: gwep4 ''->'', gwep6 ''->''" eid=3a2c07149220 ep=edge-proxy net=host nid=aeb2c6ba6996

==PORTS==
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                                                                                              
LISTEN 0      4096       127.0.0.1:39179      0.0.0.0:*    users:(("containerd",pid=801,fd=12))                                                                                                
LISTEN 0      511        127.0.0.1:8443       0.0.0.0:*    users:(("nginx",pid=10453,fd=7),("nginx",pid=10452,fd=7),("nginx",pid=10451,fd=7),("nginx",pid=10450,fd=7),("nginx",pid=10447,fd=7))
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=587,fd=15))                                                                                           
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=587,fd=17))                                                                                           
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=799,fd=3),("systemd",pid=1,fd=220))                                                                              
LISTEN 0      511          0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=10453,fd=8),("nginx",pid=10452,fd=8),("nginx",pid=10451,fd=8),("nginx",pid=10450,fd=8),("nginx",pid=10447,fd=8))
LISTEN 0      4096               *:443              *:*    users:(("network-agent",pid=1445,fd=4))                                                                                             
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=799,fd=4),("systemd",pid=1,fd=222))                                                                              
LISTEN 0      511             [::]:80            [::]:*    users:(("nginx",pid=10453,fd=9),("nginx",pid=10452,fd=9),("nginx",pid=10451,fd=9),("nginx",pid=10450,fd=9),("nginx",pid=10447,fd=9))

==TOP==
    PID    PPID COMMAND         %CPU %MEM
  22644     862 python           0.4  3.2
   1081       1 dockerd          0.0  2.0
    801       1 containerd       0.2  1.2
    768       1 fail2ban-server  0.2  1.1
    781       1 snapd            0.0  1.0
   1445    1416 network-agent    0.1  0.8
   1334       1 docker           0.0  0.7
    378       1 multipathd       0.0  0.6
    858       1 unattended-upgr  0.0  0.5
    772       1 networkd-dispat  0.0  0.5
    770       1 agent            1.4  0.3
      1       0 systemd          0.0  0.3
    587       1 systemd-resolve  0.0  0.3
    862       1 systemd          0.0  0.2
    325       1 systemd-journal  0.0  0.2
   1416       1 containerd-shim  0.0  0.2
  31249     799 sshd             1.5  0.2
  10452   10447 nginx            0.0  0.2
  10453   10447 nginx            0.0  0.2

观察项

逐台结果

节点状态主机/系统运行/负载内存磁盘inode关键服务异常观察
JP
64.118.144.182
在线 JP
Ubuntu 24.04.4 LTS
up 5 days, 22 hours, 34 minutes
load 0.00,0.00,0.00 / CPU 1
46%42%16% 运行中 运行中 未安装/不适用 未安装/不适用 未安装/不适用
KR
131.186.27.212
异常 instance-20260422-2348
Ubuntu 24.04.4 LTS
up 2 weeks, 3 days, 21 minutes
load 0.24,0.06,0.02 / CPU 2
46%10%3% 运行中 运行中 未安装/不适用 未安装/不适用 未安装/不适用 近 24 小时关键错误日志
USB
161.153.95.69
在线 instance-20260423-0151
Ubuntu 24.04.4 LTS
up 2 weeks, 3 days, 21 minutes
load 0.32,0.09,0.03 / CPU 2
48%12%3% 运行中 运行中 未安装/不适用 未安装/不适用 未安装/不适用
DE
47.254.140.158
异常 iZgw8bgfuauyw9zjm1qsftZ
Ubuntu 24.04.4 LTS
up 2 weeks, 2 days, 19 hours, 17 minutes
load 0.02,0.01,0.00 / CPU 2
32%48%10% 运行中 运行中 未安装/不适用 未安装/不适用 未安装/不适用 近 24 小时关键错误日志
HK
82.158.88.91
异常 serq25t4zyrk3xk
Ubuntu 24.04.4 LTS
up 2 weeks, 3 days, 21 minutes
load 0.05,0.01,0.00 / CPU 2
22%27%6% 运行中 运行中 未安装/不适用 未安装/不适用 未安装/不适用 近 24 小时关键错误日志
TK
103.232.213.10
异常 jppro1-2023101300230338
Ubuntu 22.04.5 LTS
up 2 weeks, 3 days, 21 minutes
load 0.00,0.00,0.00 / CPU 1
27%47%15% 运行中 运行中 未安装/不适用 未安装/不适用 未安装/不适用 近 24 小时关键错误日志
AR
129.146.59.53
异常 instance-20260423-0914
Ubuntu 24.04.4 LTS
up 3 weeks, 2 days, 1 hour, 59 minutes
load 0.13,0.11,0.09 / CPU 4
17%51%9% 运行中 未安装/不适用 未安装/不适用 运行中 运行中 近 24 小时关键错误日志
KRB
161.118.130.5
异常 instance-20260429-1226
Ubuntu 24.04.4 LTS
up 2 weeks, 3 days, 21 minutes
load 0.23,0.10,0.03 / CPU 2
44%8%3% 运行中 未安装/不适用 未安装/不适用 未安装/不适用 未安装/不适用 近 24 小时关键错误日志
US
186.244.244.52
异常 ser0570106010
Ubuntu 24.04.4 LTS
up 1 week, 3 days, 22 hours, 59 minutes
load 0.11,0.04,0.01 / CPU 4
22%42%8% 运行中 未安装/不适用 未安装/不适用 运行中 未安装/不适用 近 24 小时关键错误日志
HKA
38.76.188.244
异常 ser4062572352
Ubuntu 24.04.4 LTS
up 3 days, 7 hours, 57 minutes
load 0.11,0.06,0.01 / CPU 4
18%43%9% 运行中 未安装/不适用 未安装/不适用 运行中 未安装/不适用 近 24 小时关键错误日志
HKY
185.155.235.171
在线 hks2-202404291529122cb8ee
Ubuntu 22.04.5 LTS
up 1 week, 3 days, 22 hours, 44 minutes
load 0.00,0.00,0.00 / CPU 1
17%20%11% 未安装/不适用 运行中 未安装/不适用 未安装/不适用 未安装/不适用

建议