Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-07-08T08:01:00.088807+00:00
Window starts 2026-07-07T20:01:00.088746+00:00
Uptime
up 7 weeks, 3 days, 22 hours, 48 minutes
Load
1.07 1.08 1.07
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
54

Security

SSH activity
Failed logins: 54
Top IPs
  • 116.110.0.252 · 42 hits
  • 193.46.255.155 · 1 hits
Recent auth events
  • Jul 8 06:58:51 srv1675884 sshd-session[2824837]: Failed password for invalid user software from 116.110.0.252 port 50566 ssh2
  • Jul 8 07:00:25 srv1675884 sshd-session[2824907]: Invalid user office from 116.110.0.252 port 57750
  • Jul 8 07:00:26 srv1675884 sshd-session[2824907]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 8 07:00:26 srv1675884 sshd-session[2824907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.0.252
  • Jul 8 07:00:28 srv1675884 sshd-session[2824907]: Failed password for invalid user office from 116.110.0.252 port 57750 ssh2
  • Jul 8 07:00:59 srv1675884 sshd-session[2824922]: Invalid user admin from 116.110.0.252 port 60952
  • Jul 8 07:06:16 srv1675884 sshd-session[2825156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.0.252 user=root
  • Jul 8 07:06:18 srv1675884 sshd-session[2825156]: Failed password for root from 116.110.0.252 port 59912 ssh2

Web

HTTP status mix
200: 9404: 5
Top IPs
  • 216.73.216.63 · 8 hits
  • 193.46.255.155 · 3 hits
  • 94.154.43.64 · 1 hits
  • 34.22.154.39 · 1 hits
  • 87.237.54.191 · 1 hits
Recent access highlights
  • 94.154.43.64 - - [08/Jul/2026:00:56:40 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:152.0) Gecko/20100101 Firefox/152.0" "-"
  • 193.46.255.155 - - [08/Jul/2026:02:05:16 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
  • 193.46.255.155 - - [08/Jul/2026:02:05:19 +0000] "GET /favicon.ico HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
  • 34.22.154.39 - - [08/Jul/2026:04:52:23 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
  • 87.237.54.191 - - [08/Jul/2026:05:19:34 +0000] "GET /SDK/webLanguage HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"

System

Recent service / journal activity
  • Jul 8 08:00:51 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 8 08:00:51 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 8 08:00:54 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 965514.
  • Jul 8 08:00:54 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 8 08:00:54 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 8 08:00:54 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 8 08:00:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 965515.
  • Jul 8 08:00:58 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 8 08:00:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 8 08:00:58 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jul 8 06:01:01 srv1675884 CROND[2822604]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 8 06:01:01 srv1675884 run-parts[2822607]: (/etc/cron.hourly) starting 0anacron
  • Jul 8 06:01:01 srv1675884 run-parts[2822613]: (/etc/cron.hourly) finished 0anacron
  • Jul 8 06:01:01 srv1675884 CROND[2822603]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jul 8 07:01:01 srv1675884 CROND[2824937]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 8 07:01:01 srv1675884 run-parts[2824940]: (/etc/cron.hourly) starting 0anacron
  • Jul 8 07:01:02 srv1675884 run-parts[2824946]: (/etc/cron.hourly) finished 0anacron
  • Jul 8 07:01:02 srv1675884 CROND[2824936]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-07-08T05:50:47+0000 DEBUG crb: using metadata from Tue 07 Jul 2026 11:53:06 AM UTC.
  • 2026-07-08T05:50:47+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-07-08T05:50:47+0000 DEBUG extras: using metadata from Tue 07 Jul 2026 11:52:58 AM UTC.
  • 2026-07-08T05:50:48+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-07-08T05:50:52+0000 DEBUG epel: using metadata from Tue 07 Jul 2026 01:34:39 AM UTC.
  • 2026-07-08T05:50:53+0000 INFO Metadata cache created.
  • 2026-07-08T06:58:38+0000 INFO --- logging initialized ---
  • 2026-07-08T06:58:38+0000 INFO Metadata cache refreshed recently.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.