Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-09T08:00:29.060882+00:00
Window starts 2026-06-08T20:00:29.060853+00:00
Uptime
up 3 weeks, 2 days, 22 hours, 47 minutes
Load
1.29 1.29 1.28
Memory
1.5Gi used / 3.8Gi total
Disk /
21G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
171

Security

SSH activity
Failed logins: 171
Top IPs
  • 38.87.196.55 · 139 hits
Recent auth events
  • Jun 9 06:58:27 srv1675884 sshd-session[1282009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.87.196.55 user=root
  • Jun 9 06:58:30 srv1675884 sshd-session[1282009]: Failed password for root from 38.87.196.55 port 54796 ssh2
  • Jun 9 06:58:51 srv1675884 sshd-session[1282027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.87.196.55 user=root
  • Jun 9 06:58:53 srv1675884 sshd-session[1282027]: Failed password for root from 38.87.196.55 port 45176 ssh2
  • Jun 9 06:58:54 srv1675884 sshd-session[1282032]: Invalid user vagrant from 38.87.196.55 port 47244
  • Jun 9 06:58:55 srv1675884 sshd-session[1282032]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 9 06:58:55 srv1675884 sshd-session[1282032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.87.196.55
  • Jun 9 06:58:57 srv1675884 sshd-session[1282032]: Failed password for invalid user vagrant from 38.87.196.55 port 47244 ssh2

Web

HTTP status mix
200: 11400: 1404: 7
Top IPs
  • 216.73.216.157 · 8 hits
  • 34.227.22.107 · 2 hits
  • 46.101.57.190 · 2 hits
  • 198.211.99.252 · 1 hits
  • 159.223.97.43 · 1 hits
Recent access highlights
  • 198.211.99.252 - - [09/Jun/2026:00:49:05 +0000] "\x00\x0E8\x01\x01\x01\x01\x01\x01\x01\x01\x00\x00\x00\x00\x00" 400 157 "-" "-" "-"
  • 159.223.97.43 - - [09/Jun/2026:00:53:27 +0000] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 zgrab/0.x" "-"
  • 180.149.126.14 - - [09/Jun/2026:01:08:46 +0000] "GET /c/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" "-"
  • 46.101.57.190 - - [09/Jun/2026:02:50:47 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
  • 46.101.57.190 - - [09/Jun/2026:02:50:48 +0000] "GET /favicon.ico HTTP/1.1" 404 555 "http://77.37.47.24/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
  • 34.78.197.255 - - [09/Jun/2026:03:37:20 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
  • 180.149.126.11 - - [09/Jun/2026:04:02:14 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" "-"
  • 168.62.16.126 - - [09/Jun/2026:04:07:51 +0000] "GET /mcp HTTP/1.1" 404 153 "-" "Mozilla/5.0 zgrab/0.x" "-"

System

Recent service / journal activity
  • Jun 9 08:00:19 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 9 08:00:19 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 9 08:00:22 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 234465.
  • Jun 9 08:00:22 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 9 08:00:22 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 9 08:00:22 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 9 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 234466.
  • Jun 9 08:00:26 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 9 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 9 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 9 06:01:01 srv1675884 CROND[1279918]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 9 06:01:01 srv1675884 run-parts[1279921]: (/etc/cron.hourly) starting 0anacron
  • Jun 9 06:01:01 srv1675884 run-parts[1279927]: (/etc/cron.hourly) finished 0anacron
  • Jun 9 06:01:01 srv1675884 CROND[1279917]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 9 07:01:01 srv1675884 CROND[1282107]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 9 07:01:01 srv1675884 run-parts[1282110]: (/etc/cron.hourly) starting 0anacron
  • Jun 9 07:01:01 srv1675884 run-parts[1282116]: (/etc/cron.hourly) finished 0anacron
  • Jun 9 07:01:01 srv1675884 CROND[1282106]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-09T07:41:34+0000 DEBUG baseos: using metadata from Mon 08 Jun 2026 06:43:36 PM UTC.
  • 2026-06-09T07:41:35+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-06-09T07:41:35+0000 DEBUG crb: using metadata from Mon 08 Jun 2026 06:44:00 PM UTC.
  • 2026-06-09T07:41:36+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-06-09T07:41:36+0000 DEBUG extras: using metadata from Mon 08 Jun 2026 06:43:53 PM UTC.
  • 2026-06-09T07:41:37+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-06-09T07:41:52+0000 DEBUG epel: using metadata from Tue 09 Jun 2026 12:52:28 AM UTC.
  • 2026-06-09T07:41:52+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.