Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-07T08:00:19.749967+00:00
Window starts 2026-06-06T20:00:19.749939+00:00
Uptime
up 3 weeks, 22 hours, 47 minutes
Load
1.35 1.30 1.28
Memory
1.5Gi used / 3.8Gi total
Disk /
21G used / 49G total (43% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
4

Security

SSH activity
Failed logins: 4
Top IPs
  • 35.205.8.250 · 3 hits
Recent auth events
  • Jun 7 03:00:17 srv1675884 sshd-session[1172804]: Invalid user admin from 35.205.8.250 port 7596
  • Jun 7 03:00:17 srv1675884 sshd-session[1172804]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 7 03:00:17 srv1675884 sshd-session[1172804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.205.8.250
  • Jun 7 03:00:19 srv1675884 sshd-session[1172804]: Failed password for invalid user admin from 35.205.8.250 port 7596 ssh2

Web

HTTP status mix
200: 14400: 2404: 50
Top IPs
  • 178.105.221.132 · 46 hits
  • 216.73.216.123 · 4 hits
  • 31.59.160.12 · 2 hits
  • 8.216.86.250 · 2 hits
  • 8.221.137.240 · 2 hits
Recent access highlights
  • 178.105.221.132 - - [07/Jun/2026:02:40:32 +0000] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 178.105.221.132 - - [07/Jun/2026:02:40:33 +0000] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 178.105.221.132 - - [07/Jun/2026:02:40:33 +0000] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 178.105.221.132 - - [07/Jun/2026:02:40:33 +0000] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 178.105.221.132 - - [07/Jun/2026:02:40:33 +0000] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 178.105.221.132 - - [07/Jun/2026:02:40:33 +0000] "GET /containers/json HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 34.38.56.46 - - [07/Jun/2026:03:21:27 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
  • 20.150.215.64 - - [07/Jun/2026:06:44:26 +0000] "GET / HTTP/1.1" 404 153 "-" "Go-http-client/1.1" "-"

System

Recent service / journal activity
  • Jun 7 08:00:09 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 7 08:00:09 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 7 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 186481.
  • Jun 7 08:00:13 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 7 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 7 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 7 08:00:16 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 186482.
  • Jun 7 08:00:16 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 7 08:00:17 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 7 08:00:17 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 7 06:01:01 srv1675884 CROND[1178991]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 7 06:01:01 srv1675884 run-parts[1178995]: (/etc/cron.hourly) starting 0anacron
  • Jun 7 06:01:01 srv1675884 run-parts[1179001]: (/etc/cron.hourly) finished 0anacron
  • Jun 7 06:01:01 srv1675884 CROND[1178990]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 7 07:01:01 srv1675884 CROND[1181030]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 7 07:01:01 srv1675884 run-parts[1181033]: (/etc/cron.hourly) starting 0anacron
  • Jun 7 07:01:01 srv1675884 run-parts[1181039]: (/etc/cron.hourly) finished 0anacron
  • Jun 7 07:01:01 srv1675884 CROND[1181029]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-07T05:33:04+0000 DEBUG baseos: using metadata from Fri 05 Jun 2026 12:51:41 PM UTC.
  • 2026-06-07T05:33:06+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-06-07T05:33:06+0000 DEBUG crb: using metadata from Fri 05 Jun 2026 12:52:06 PM UTC.
  • 2026-06-07T05:33:09+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-06-07T05:33:09+0000 DEBUG extras: using metadata from Fri 05 Jun 2026 12:51:59 PM UTC.
  • 2026-06-07T05:33:10+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-06-07T06:46:26+0000 INFO --- logging initialized ---
  • 2026-06-07T06:46:27+0000 INFO Metadata cache refreshed recently.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.