Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-07-04T08:00:31.765659+00:00
Window starts 2026-07-03T20:00:31.765634+00:00
Uptime
up 6 weeks, 6 days, 22 hours, 47 minutes
Load
1.10 1.03 1.03
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
20

Security

SSH activity
Failed logins: 20
Top IPs
  • 165.22.11.22 · 12 hits
  • 34.156.132.47 · 3 hits
Recent auth events
  • Jul 3 22:19:38 srv1675884 sshd-session[2581266]: Invalid user master from 165.22.11.22 port 58206
  • Jul 3 22:19:38 srv1675884 sshd-session[2581266]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 3 22:19:38 srv1675884 sshd-session[2581266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.11.22
  • Jul 3 22:19:40 srv1675884 sshd-session[2581266]: Failed password for invalid user master from 165.22.11.22 port 58206 ssh2
  • Jul 4 02:17:02 srv1675884 sshd-session[2590395]: Invalid user admin from 34.156.132.47 port 42436
  • Jul 4 02:17:02 srv1675884 sshd-session[2590395]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 4 02:17:02 srv1675884 sshd-session[2590395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.156.132.47
  • Jul 4 02:17:05 srv1675884 sshd-session[2590395]: Failed password for invalid user admin from 34.156.132.47 port 42436 ssh2

Web

HTTP status mix
200: 16304: 1400: 2404: 4
Top IPs
  • 216.73.217.87 · 8 hits
  • 104.194.196.139 · 3 hits
  • 34.77.82.71 · 3 hits
  • 162.216.149.78 · 2 hits
  • 2a06:4882:d000::f7 · 1 hits
Recent access highlights
  • 162.216.149.78 - - [04/Jul/2026:04:58:50 +0000] "GET / HTTP/1.1" 200 14235 "-" "curl/7.68.0" "-"
  • 192.121.149.80 - - [04/Jul/2026:06:40:28 +0000] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x033]\xC4fA(\xAC\x15d$k\xE4S\x90\x91uDx\xC7AW\xEA\xCF\xC4\xF6\x11a\x1BZy\xA6\xE1 \xF7\x8F\x85\xFFwS'MZr~9\x92\x17\xD7=\x12pj\xEBw\x89\xC8\xBF\xA7\x97\x9C\xAE\x9F\xDD+\x19\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-"
  • 192.71.81.171 - - [04/Jul/2026:06:40:29 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" "-"
  • 34.156.203.33 - - [04/Jul/2026:07:31:08 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
  • 34.77.82.71 - - [04/Jul/2026:07:31:14 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-" "-"
  • 34.77.82.71 - - [04/Jul/2026:07:31:14 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-" "-"
  • 34.77.82.71 - - [04/Jul/2026:07:31:15 +0000] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; nmap-http-info)" "-"
  • 34.77.82.71 - - [04/Jul/2026:07:31:18 +0000] "GET /favicon.ico HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible)" "-"

System

Recent service / journal activity
  • Jul 4 08:00:23 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 4 08:00:23 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 4 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 859244.
  • Jul 4 08:00:26 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 4 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 4 08:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 4 08:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 859245.
  • Jul 4 08:00:30 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 4 08:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 4 08:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jul 4 06:01:01 srv1675884 CROND[2599100]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 4 06:01:01 srv1675884 run-parts[2599104]: (/etc/cron.hourly) starting 0anacron
  • Jul 4 06:01:02 srv1675884 run-parts[2599110]: (/etc/cron.hourly) finished 0anacron
  • Jul 4 06:01:02 srv1675884 CROND[2599099]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jul 4 07:01:01 srv1675884 CROND[2601405]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 4 07:01:01 srv1675884 run-parts[2601408]: (/etc/cron.hourly) starting 0anacron
  • Jul 4 07:01:01 srv1675884 run-parts[2601414]: (/etc/cron.hourly) finished 0anacron
  • Jul 4 07:01:01 srv1675884 CROND[2601404]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-07-04T07:42:15+0000 DEBUG baseos: using metadata from Thu 02 Jul 2026 09:24:54 AM UTC.
  • 2026-07-04T07:42:16+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-07-04T07:42:16+0000 DEBUG crb: using metadata from Thu 02 Jul 2026 09:25:20 AM UTC.
  • 2026-07-04T07:42:17+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-07-04T07:42:17+0000 DEBUG extras: using metadata from Thu 02 Jul 2026 09:25:12 AM UTC.
  • 2026-07-04T07:42:18+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-07-04T07:42:24+0000 DEBUG epel: using metadata from Fri 03 Jul 2026 12:35:56 AM UTC.
  • 2026-07-04T07:42:26+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.