Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-07-01T20:00:34.251704+00:00
Window starts 2026-07-01T08:00:34.251674+00:00
Uptime
up 6 weeks, 4 days, 10 hours, 47 minutes
Load
1.07 1.10 1.09
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
136

Security

SSH activity
Failed logins: 136
Top IPs
  • 152.53.152.101 · 113 hits
Recent auth events
  • Jul 1 18:07:35 srv1675884 sshd-session[2458749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.53.152.101 user=root
  • Jul 1 18:07:37 srv1675884 sshd-session[2458749]: Failed password for root from 152.53.152.101 port 50982 ssh2
  • Jul 1 18:07:38 srv1675884 sshd-session[2458753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.53.152.101 user=root
  • Jul 1 18:07:40 srv1675884 sshd-session[2458753]: Failed password for root from 152.53.152.101 port 50998 ssh2
  • Jul 1 18:07:40 srv1675884 sshd-session[2458757]: Invalid user vagrant from 152.53.152.101 port 39618
  • Jul 1 18:07:40 srv1675884 sshd-session[2458757]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 1 18:07:40 srv1675884 sshd-session[2458757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.53.152.101
  • Jul 1 18:07:42 srv1675884 sshd-session[2458757]: Failed password for invalid user vagrant from 152.53.152.101 port 39618 ssh2

Web

HTTP status mix
200: 29301: 1400: 1401: 1404: 123405: 1
Top IPs
  • 130.12.180.48 · 78 hits
  • 64.236.161.20 · 48 hits
  • 216.73.216.111 · 18 hits
  • 45.142.115.19 · 2 hits
  • 74.7.243.235 · 2 hits
Recent access highlights
  • 130.12.180.48 - - [01/Jul/2026:15:25:38 +0000] "GET /1.sql HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
  • 130.12.180.48 - - [01/Jul/2026:15:25:38 +0000] "GET /1password.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
  • 130.12.180.48 - - [01/Jul/2026:15:25:39 +0000] "GET /actuator/configprops HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
  • 130.12.180.48 - - [01/Jul/2026:15:25:39 +0000] "GET /actuator/env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
  • 130.12.180.48 - - [01/Jul/2026:15:25:39 +0000] "GET /actuator/heapdump HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
  • 130.12.180.48 - - [01/Jul/2026:15:25:40 +0000] "GET /actuator/jolokia HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "-"
  • 108.131.49.183 - - [01/Jul/2026:17:24:29 +0000] "HEAD / HTTP/1.1" 401 0 "https://www.netcraft.com/survey/" "Mozilla/4.0 (compatible; Netcraft Web Server Survey)" "-"
  • 43.135.136.181 - - [01/Jul/2026:18:34:39 +0000] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"

System

Recent service / journal activity
  • Jul 1 20:00:27 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 792841.
  • Jul 1 20:00:27 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 1 20:00:27 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 1 20:00:27 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 1 20:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 792842.
  • Jul 1 20:00:30 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 1 20:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 1 20:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 1 20:00:33 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 792843.
  • Jul 1 20:00:33 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.

Maintenance

Cron
  • Jul 1 18:01:01 srv1675884 CROND[2458333]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 1 18:01:01 srv1675884 run-parts[2458336]: (/etc/cron.hourly) starting 0anacron
  • Jul 1 18:01:01 srv1675884 run-parts[2458342]: (/etc/cron.hourly) finished 0anacron
  • Jul 1 18:01:01 srv1675884 CROND[2458332]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jul 1 19:01:01 srv1675884 CROND[2460793]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 1 19:01:01 srv1675884 run-parts[2460796]: (/etc/cron.hourly) starting 0anacron
  • Jul 1 19:01:01 srv1675884 run-parts[2460802]: (/etc/cron.hourly) finished 0anacron
  • Jul 1 19:01:01 srv1675884 CROND[2460792]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-07-01T16:50:46+0000 DEBUG extras: using metadata from Wed 01 Jul 2026 12:35:00 PM UTC.
  • 2026-07-01T16:50:47+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-07-01T16:50:48+0000 DEBUG epel: using metadata from Wed 01 Jul 2026 01:22:31 AM UTC.
  • 2026-07-01T16:50:48+0000 INFO Metadata cache created.
  • 2026-07-01T18:17:23+0000 INFO --- logging initialized ---
  • 2026-07-01T18:17:23+0000 INFO Metadata cache refreshed recently.
  • 2026-07-01T19:48:03+0000 INFO --- logging initialized ---
  • 2026-07-01T19:48:03+0000 INFO Metadata cache refreshed recently.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.