Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-04T04:41:48.756293+00:00
Window starts 2026-06-03T16:41:48.756266+00:00
Uptime
up 2 weeks, 4 days, 19 hours, 28 minutes
Load
2.32 3.50 2.89
Memory
1.5Gi used / 3.8Gi total
Disk /
21G used / 49G total (43% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
151

Security

SSH activity
Failed logins: 151
Top IPs
  • 161.248.116.189 · 86 hits
  • 47.243.20.81 · 13 hits
  • 14.103.91.55 · 7 hits
  • 103.61.122.229 · 6 hits
  • 202.51.214.99 · 5 hits
Recent auth events
  • Jun 4 03:16:11 srv1675884 sshd-session[1019838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.91.55 user=root
  • Jun 4 03:16:11 srv1675884 sshd-session[1019842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.122.229 user=root
  • Jun 4 03:16:13 srv1675884 sshd-session[1019842]: Failed password for root from 103.61.122.229 port 57034 ssh2
  • Jun 4 03:16:13 srv1675884 sshd-session[1019838]: Failed password for root from 14.103.91.55 port 44614 ssh2
  • Jun 4 03:34:23 srv1675884 sshd-session[1020474]: Invalid user admin from 34.78.106.127 port 29732
  • Jun 4 03:34:23 srv1675884 sshd-session[1020474]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 4 03:34:23 srv1675884 sshd-session[1020474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.78.106.127
  • Jun 4 03:34:25 srv1675884 sshd-session[1020474]: Failed password for invalid user admin from 34.78.106.127 port 29732 ssh2

Web

HTTP status mix
400: 8401: 7
Top IPs
  • 172.237.104.26 · 2 hits
  • 159.65.188.126 · 2 hits
  • 104.199.20.65 · 2 hits
  • 111.94.205.218 · 1 hits
  • 183.171.242.57 · 1 hits
Recent access highlights
  • 181.115.99.121 - - [04/Jun/2026:03:08:19 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 157 "-" "terrabot-owned-you" "-"
  • 181.115.99.121 - - [04/Jun/2026:03:08:19 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 157 "-" "terrabot-owned-you" "-"
  • 34.77.159.109 - - [04/Jun/2026:03:36:48 +0000] "GET / HTTP/1.1" 401 581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
  • 104.199.20.65 - - [04/Jun/2026:03:37:09 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-" "-"
  • 104.199.20.65 - - [04/Jun/2026:03:37:09 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-" "-"
  • 104.199.20.65 - - [04/Jun/2026:03:37:09 +0000] "GET / HTTP/1.1" 401 179 "-" "Mozilla/5.0 (compatible)" "-"
  • 127.0.0.1 - - [04/Jun/2026:04:40:25 +0000] "HEAD /server-activity-dashboard/ HTTP/1.1" 401 0 "-" "curl/8.12.1" "-"
  • 127.0.0.1 - - [04/Jun/2026:04:40:25 +0000] "HEAD /server-activity-dashboard/ HTTP/1.1" 401 0 "-" "curl/8.12.1" "-"

System

Recent service / journal activity
  • Jun 4 04:41:37 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 04:41:37 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 4 04:41:41 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 112950.
  • Jun 4 04:41:41 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 4 04:41:42 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 04:41:42 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 4 04:41:45 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 112951.
  • Jun 4 04:41:45 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 4 04:41:46 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 04:41:46 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 4 03:01:02 srv1675884 CROND[1019268]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 4 03:48:02 srv1675884 anacron[1019280]: Job `cron.daily' started
  • Jun 4 03:48:02 srv1675884 anacron[1019280]: Job `cron.daily' terminated
  • Jun 4 03:48:02 srv1675884 anacron[1019280]: Normal exit (1 job run)
  • Jun 4 04:01:01 srv1675884 CROND[1021396]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 4 04:01:01 srv1675884 run-parts[1021399]: (/etc/cron.hourly) starting 0anacron
  • Jun 4 04:01:01 srv1675884 run-parts[1021405]: (/etc/cron.hourly) finished 0anacron
  • Jun 4 04:01:01 srv1675884 CROND[1021395]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-04T03:56:46+0000 DEBUG baseos: using metadata from Wed 03 Jun 2026 02:13:17 PM UTC.
  • 2026-06-04T03:56:47+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-06-04T03:56:47+0000 DEBUG crb: using metadata from Wed 03 Jun 2026 02:13:47 PM UTC.
  • 2026-06-04T03:56:48+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-06-04T03:56:48+0000 DEBUG extras: using metadata from Wed 03 Jun 2026 02:13:40 PM UTC.
  • 2026-06-04T03:56:50+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-06-04T03:57:07+0000 DEBUG epel: using metadata from Wed 03 Jun 2026 12:47:32 AM UTC.
  • 2026-06-04T03:57:14+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.