Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-21T08:00:34.963815+00:00
Window starts 2026-06-20T20:00:34.963755+00:00
Uptime
up 5 weeks, 22 hours, 47 minutes
Load
1.33 1.37 1.30
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
176

Security

SSH activity
Failed logins: 176
Top IPs
  • 95.38.233.32 · 142 hits
Recent auth events
  • Jun 21 06:40:54 srv1675884 sshd-session[1888929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.38.233.32 user=root
  • Jun 21 06:40:56 srv1675884 sshd-session[1888929]: Failed password for root from 95.38.233.32 port 49632 ssh2
  • Jun 21 06:41:06 srv1675884 sshd-session[1888939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.38.233.32 user=root
  • Jun 21 06:41:08 srv1675884 sshd-session[1888939]: Failed password for root from 95.38.233.32 port 37698 ssh2
  • Jun 21 06:41:20 srv1675884 sshd-session[1888948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.38.233.32 user=root
  • Jun 21 06:41:21 srv1675884 sshd-session[1888948]: Failed password for root from 95.38.233.32 port 39376 ssh2
  • Jun 21 06:41:32 srv1675884 sshd-session[1888960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.38.233.32 user=root
  • Jun 21 06:41:33 srv1675884 sshd-session[1888960]: Failed password for root from 95.38.233.32 port 57634 ssh2

Web

HTTP status mix
200: 3400: 3404: 51
Top IPs
  • 8.219.249.218 · 46 hits
  • 137.220.157.146 · 4 hits
  • 184.105.139.67 · 2 hits
  • 103.246.144.102 · 1 hits
  • 49.51.50.147 · 1 hits
Recent access highlights
  • 8.219.249.218 - - [21/Jun/2026:07:06:12 +0000] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 8.219.249.218 - - [21/Jun/2026:07:06:12 +0000] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 8.219.249.218 - - [21/Jun/2026:07:06:13 +0000] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 8.219.249.218 - - [21/Jun/2026:07:06:13 +0000] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 8.219.249.218 - - [21/Jun/2026:07:06:13 +0000] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 8.219.249.218 - - [21/Jun/2026:07:06:13 +0000] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 8.219.249.218 - - [21/Jun/2026:07:06:13 +0000] "GET /containers/json HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 2a06:4884:9000::95 - - [21/Jun/2026:07:20:38 +0000] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" "-"

System

Recent service / journal activity
  • Jun 21 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 21 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 21 08:00:29 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 521428.
  • Jun 21 08:00:29 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 21 08:00:29 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 21 08:00:29 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 21 08:00:33 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 521429.
  • Jun 21 08:00:33 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 21 08:00:33 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 21 08:00:33 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 21 06:01:01 srv1675884 CROND[1887246]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 21 06:01:01 srv1675884 run-parts[1887249]: (/etc/cron.hourly) starting 0anacron
  • Jun 21 06:01:01 srv1675884 run-parts[1887255]: (/etc/cron.hourly) finished 0anacron
  • Jun 21 06:01:02 srv1675884 CROND[1887245]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 21 07:01:01 srv1675884 CROND[1889621]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 21 07:01:01 srv1675884 run-parts[1889624]: (/etc/cron.hourly) starting 0anacron
  • Jun 21 07:01:01 srv1675884 run-parts[1889630]: (/etc/cron.hourly) finished 0anacron
  • Jun 21 07:01:01 srv1675884 CROND[1889620]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-21T07:04:01+0000 DEBUG baseos: using metadata from Wed 17 Jun 2026 03:08:31 PM UTC.
  • 2026-06-21T07:04:02+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-06-21T07:04:02+0000 DEBUG crb: using metadata from Wed 17 Jun 2026 03:09:00 PM UTC.
  • 2026-06-21T07:04:04+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-06-21T07:04:04+0000 DEBUG extras: using metadata from Wed 17 Jun 2026 03:08:51 PM UTC.
  • 2026-06-21T07:04:05+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-06-21T07:04:14+0000 DEBUG epel: using metadata from Sun 21 Jun 2026 12:22:12 AM UTC.
  • 2026-06-21T07:04:14+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.