Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-07-09T08:00:22.727739+00:00
Window starts 2026-07-08T20:00:22.727697+00:00
Uptime
up 7 weeks, 4 days, 22 hours, 47 minutes
Load
1.02 1.07 1.06
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
146

Security

SSH activity
Failed logins: 146
Top IPs
  • 209.46.123.148 · 74 hits
  • 194.26.192.146 · 46 hits
Recent auth events
  • Jul 9 03:48:35 srv1675884 sshd-session[2874220]: Invalid user admin from 194.26.192.146 port 49678
  • Jul 9 03:48:35 srv1675884 sshd-session[2874220]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 9 03:48:35 srv1675884 sshd-session[2874220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.26.192.146
  • Jul 9 03:48:37 srv1675884 sshd-session[2874220]: Failed password for invalid user admin from 194.26.192.146 port 49678 ssh2
  • Jul 9 03:48:39 srv1675884 sshd-session[2874224]: Invalid user admin from 194.26.192.146 port 49686
  • Jul 9 03:48:39 srv1675884 sshd-session[2874224]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 9 03:48:39 srv1675884 sshd-session[2874224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.26.192.146
  • Jul 9 03:48:40 srv1675884 sshd-session[2874224]: Failed password for invalid user admin from 194.26.192.146 port 49686 ssh2

Web

HTTP status mix
200: 14400: 4404: 55
Top IPs
  • 165.120.111.206 · 46 hits
  • 34.76.33.205 · 9 hits
  • 216.73.216.236 · 8 hits
  • 172.237.109.98 · 3 hits
  • 74.7.230.38 · 1 hits
Recent access highlights
  • 165.120.111.206 - - [09/Jul/2026:07:38:51 +0000] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:51 +0000] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:52 +0000] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:53 +0000] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:54 +0000] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:54 +0000] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:55 +0000] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 165.120.111.206 - - [09/Jul/2026:07:38:56 +0000] "GET /containers/json HTTP/1.1" 404 153 "-" "libredtail-http" "-"

System

Recent service / journal activity
  • Jul 9 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 9 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 9 08:00:17 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 992069.
  • Jul 9 08:00:17 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 9 08:00:17 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 9 08:00:17 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 9 08:00:20 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 992070.
  • Jul 9 08:00:20 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 9 08:00:20 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 9 08:00:20 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jul 9 06:01:01 srv1675884 CROND[2879307]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 9 06:01:01 srv1675884 run-parts[2879310]: (/etc/cron.hourly) starting 0anacron
  • Jul 9 06:01:01 srv1675884 run-parts[2879316]: (/etc/cron.hourly) finished 0anacron
  • Jul 9 06:01:01 srv1675884 CROND[2879306]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jul 9 07:01:01 srv1675884 CROND[2881624]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 9 07:01:01 srv1675884 run-parts[2881627]: (/etc/cron.hourly) starting 0anacron
  • Jul 9 07:01:01 srv1675884 run-parts[2881633]: (/etc/cron.hourly) finished 0anacron
  • Jul 9 07:01:01 srv1675884 CROND[2881623]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-07-09T06:30:05+0000 DEBUG crb: using metadata from Wed 08 Jul 2026 01:51:39 PM UTC.
  • 2026-07-09T06:30:06+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-07-09T06:30:06+0000 DEBUG extras: using metadata from Wed 08 Jul 2026 01:51:31 PM UTC.
  • 2026-07-09T06:30:06+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-07-09T06:30:10+0000 DEBUG epel: using metadata from Wed 08 Jul 2026 12:46:03 AM UTC.
  • 2026-07-09T06:30:12+0000 INFO Metadata cache created.
  • 2026-07-09T07:54:52+0000 INFO --- logging initialized ---
  • 2026-07-09T07:54:52+0000 INFO Metadata cache refreshed recently.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.