# VPS Maintenance & Security Audit Report
Generated on: `Thu Jun  4 11:47:18 UTC 2026`
Target Hostname: `server1.ibda3.net`
---
### System Details
* **Operating System:** AlmaLinux
* **OS Version:** 8.10
* **cPanel Version:** 134.0 (build 35)
* **Backup Location:** `/root/backup_maintenance_2026-06-04_114718/`

### Performance & Health
* **CPU Load Average:** `0.58, 0.94, 1.01` (Cores: 4)
* **Memory Usage:** `3627 MB / 5937 MB (61%)`
* **Disk Partitions Warning (>85%):** None
* **Inode Usage Warning (>85%):** None


### Security Configuration
* **SSH Port:** `22`
* **SSH Permit Root Login:** `yes`
* **SSH Password Auth:** `no`
* **CSF Firewall Status:** Active
* **cPHulk Status:** N/A
* **ModSecurity Status:** Active
* **Imunify360 Status:** Inactive/Missing
* **Anonymous FTP:** Disabled


### Integrity & Malware Audit
* **Suspicious Obfuscated PHP Scripts:** 44 files detected.
* **World-Writable Files in Website Roots:** 2 files detected.
* **Suspicious Cron Jobs:** 0 entries detected.

### Service & License Health
* **Apache:** Active
* **MySQL/MariaDB:** Active
* **Mail Server (Exim):** Active
* **IMAP/POP3 Server (Dovecot):** Active
* **DNS Server (Named):** **INACTIVE/FAILED** 🔴
* **cPanel License Status:** **FAILED/INVALID** 🔴

### Pending Updates & Patches
* **Pending Package Updates:** 94
* **Kernel Upgrade Available:** Yes (Reboot required)


## Audit Findings Summary

### 🔴 CRITICAL
* Service 'DNS Server (Named)' (named) is stopped/failed!
* cPanel License Check Failed: Updating cPanel license...Done. Update succeeded.

### 🟠 HIGH
* SSH allows direct root logins (PermitRootLogin yes). Disabling and using a sudo user is recommended.
* Insecure listening services detected: RPCBind (Port 111)

### 🟡 MEDIUM
* Imunify360 is installed but inactive.
* Found 44 suspicious PHP files containing shell indicators (e.g. obfuscated eval).
* cPanel RPM database audit reported issues: /root/vps_maintenance_suite.sh: line 538: /scripts/check_cpanel_rpms: No such file or directory
error
* There are 94 pending package updates on the server.
* A kernel upgrade is available. Applying it will require a system reboot.

### 🟢 LOW
* SSH port is set to the default port 22. Changing to a non-standard port is recommended.
* Found 2 world-writable files inside website document roots.

### ℹ️ INFORMATIONAL
* cPHulk control binary not found.

## Recommended Remediation Steps
### Failed Services Recovery
* **Start Failed Service (DNS Server (Named)):** `/usr/local/cpanel/shared/helper_scripts/restartsrv_named`
### SSH Configuration Hardening
Edit `/etc/ssh/sshd_config` using a text editor (e.g. `nano` or `vi`) and modify the following directives:
* Change `PermitRootLogin yes` to `PermitRootLogin prohibit-password` or `no` (Ensure SSH keys are tested first!)
* Change `PasswordAuthentication yes` to `PasswordAuthentication no`
* After saving, test config integrity: `sshd -t`
* Reload SSH service: `systemctl reload sshd`
---
*Report generated automatically by Antigravity VPS Maintenance Suite.*