Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-07-10T20:00:08.649010+00:00
Window starts 2026-07-10T08:00:08.648955+00:00
Uptime
up 7 weeks, 6 days, 10 hours, 47 minutes
Load
1.25 1.08 1.06
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
200

Security

SSH activity
Failed logins: 200
Top IPs
  • 13.143.252.8 · 150 hits
Recent auth events
  • Jul 10 19:39:46 srv1675884 sshd-session[2966972]: Invalid user kvm25 from 13.143.252.8 port 41022
  • Jul 10 19:39:46 srv1675884 sshd-session[2966972]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 10 19:39:46 srv1675884 sshd-session[2966972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.143.252.8
  • Jul 10 19:39:48 srv1675884 sshd-session[2966972]: Failed password for invalid user kvm25 from 13.143.252.8 port 41022 ssh2
  • Jul 10 19:39:54 srv1675884 sshd-session[2966980]: Invalid user us39 from 13.143.252.8 port 42300
  • Jul 10 19:39:55 srv1675884 sshd-session[2966980]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 10 19:39:55 srv1675884 sshd-session[2966980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.143.252.8
  • Jul 10 19:39:57 srv1675884 sshd-session[2966980]: Failed password for invalid user us39 from 13.143.252.8 port 42300 ssh2

Web

HTTP status mix
200: 28301: 1400: 2404: 47
Top IPs
  • 42.224.75.118 · 46 hits
  • 216.73.216.236 · 20 hits
  • 101.32.218.225 · 2 hits
  • 43.98.207.223 · 2 hits
  • 43.106.50.232 · 2 hits
Recent access highlights
  • 42.224.75.118 - - [10/Jul/2026:14:17:26 +0000] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:27 +0000] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:29 +0000] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:30 +0000] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:31 +0000] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:32 +0000] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:33 +0000] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 153 "-" "libredtail-http" "-"
  • 42.224.75.118 - - [10/Jul/2026:14:17:34 +0000] "GET /containers/json HTTP/1.1" 404 153 "-" "libredtail-http" "-"

System

Recent service / journal activity
  • Jul 10 19:59:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 10 19:59:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 10 20:00:02 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 1031889.
  • Jul 10 20:00:02 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 10 20:00:02 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 10 20:00:02 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 10 20:00:05 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 1031890.
  • Jul 10 20:00:05 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 10 20:00:05 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 10 20:00:05 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jul 10 18:01:02 srv1675884 CROND[2962591]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 10 18:01:02 srv1675884 run-parts[2962595]: (/etc/cron.hourly) starting 0anacron
  • Jul 10 18:01:02 srv1675884 run-parts[2962601]: (/etc/cron.hourly) finished 0anacron
  • Jul 10 18:01:02 srv1675884 CROND[2962590]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jul 10 19:01:01 srv1675884 CROND[2964960]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 10 19:01:01 srv1675884 run-parts[2964963]: (/etc/cron.hourly) starting 0anacron
  • Jul 10 19:01:01 srv1675884 run-parts[2964969]: (/etc/cron.hourly) finished 0anacron
  • Jul 10 19:01:01 srv1675884 CROND[2964959]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-07-10T19:01:22+0000 DEBUG baseos: using metadata from Fri 10 Jul 2026 10:46:13 AM UTC.
  • 2026-07-10T19:01:22+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-07-10T19:01:22+0000 DEBUG crb: using metadata from Fri 10 Jul 2026 10:47:04 AM UTC.
  • 2026-07-10T19:01:23+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-07-10T19:01:23+0000 DEBUG extras: using metadata from Fri 10 Jul 2026 10:46:56 AM UTC.
  • 2026-07-10T19:01:24+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-07-10T19:01:26+0000 DEBUG epel: using metadata from Fri 10 Jul 2026 12:21:46 AM UTC.
  • 2026-07-10T19:01:26+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.