Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-07-04T20:00:43.244878+00:00
Window starts 2026-07-04T08:00:43.244807+00:00
Uptime
up 7 weeks, 10 hours, 47 minutes
Load
1.09 1.15 1.10
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
180

Security

SSH activity
Failed logins: 180
Top IPs
  • 116.99.171.206 · 82 hits
  • 171.231.195.111 · 60 hits
  • 106.15.56.151 · 1 hits
Recent auth events
  • Jul 4 14:33:37 srv1675884 sshd-session[2619000]: Failed password for invalid user newadmin from 116.99.171.206 port 35818 ssh2
  • Jul 4 14:34:07 srv1675884 sshd-session[2619023]: Invalid user auto from 171.231.195.111 port 33948
  • Jul 4 14:34:08 srv1675884 sshd-session[2619023]: pam_unix(sshd:auth): check pass; user unknown
  • Jul 4 14:34:08 srv1675884 sshd-session[2619023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.231.195.111
  • Jul 4 14:34:09 srv1675884 sshd-session[2619023]: Failed password for invalid user auto from 171.231.195.111 port 33948 ssh2
  • Jul 4 14:34:30 srv1675884 sshd-session[2619038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.231.195.111 user=root
  • Jul 4 14:34:32 srv1675884 sshd-session[2619038]: Failed password for root from 171.231.195.111 port 37760 ssh2
  • Jul 4 14:45:35 srv1675884 sshd-session[2619464]: Invalid user from 106.15.56.151 port 54842

Web

HTTP status mix
200: 161400: 1401: 85404: 3
Top IPs
  • 136.67.9.57 · 234 hits
  • 216.73.217.87 · 8 hits
  • 34.89.192.28 · 1 hits
  • 156.246.91.40 · 1 hits
  • 34.83.101.43 · 1 hits
Recent access highlights
  • 136.67.9.57 - - [04/Jul/2026:12:04:01 +0000] "GET /backend/sendgrid.env HTTP/1.1" 401 581 "-" "Mozilla/5.0 (Linux; Android 9; G8341) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-"
  • 136.67.9.57 - - [04/Jul/2026:12:04:02 +0000] "GET /notifications/.env HTTP/1.1" 401 179 "-" "Mozilla/5.0 (X11; U; Linux armv61; en-US; rv:1.9.1b2pre) Gecko/20081015 Fennec/1.0a1" "-"
  • 136.67.9.57 - - [04/Jul/2026:12:04:02 +0000] "GET /email/.env HTTP/1.1" 401 179 "-" "Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 630) like Gecko" "-"
  • 136.67.9.57 - - [04/Jul/2026:12:04:02 +0000] "GET /.aws/credentials.backup HTTP/1.1" 401 581 "-" "Mozilla/5.0 (Linux; Android 9; MI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-"
  • 156.246.91.40 - - [04/Jul/2026:13:49:32 +0000] "GET / HTTP/1.1" 404 153 "-" "Linux Gnu (cow)" "-"
  • 35.226.127.163 - - [04/Jul/2026:15:07:07 +0000] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 zgrab/0.x" "-"
  • 5.22.215.152 - - [04/Jul/2026:18:43:46 +0000] "GET / HTTP/1.1" 400 157 "-" "-" "-"
  • 31.192.110.245 - - [04/Jul/2026:19:19:50 +0000] "GET / HTTP/1.1" 404 153 "-" "Go-http-client/1.1" "-"

System

Recent service / journal activity
  • Jul 4 20:00:34 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 4 20:00:34 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 4 20:00:38 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 872538.
  • Jul 4 20:00:38 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 4 20:00:38 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 4 20:00:38 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jul 4 20:00:41 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 872539.
  • Jul 4 20:00:41 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jul 4 20:00:41 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jul 4 20:00:41 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jul 4 18:01:01 srv1675884 CROND[2626975]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 4 18:01:01 srv1675884 run-parts[2626978]: (/etc/cron.hourly) starting 0anacron
  • Jul 4 18:01:01 srv1675884 run-parts[2626984]: (/etc/cron.hourly) finished 0anacron
  • Jul 4 18:01:01 srv1675884 CROND[2626974]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jul 4 19:01:01 srv1675884 CROND[2629272]: (root) CMD (run-parts /etc/cron.hourly)
  • Jul 4 19:01:01 srv1675884 run-parts[2629275]: (/etc/cron.hourly) starting 0anacron
  • Jul 4 19:01:01 srv1675884 run-parts[2629281]: (/etc/cron.hourly) finished 0anacron
  • Jul 4 19:01:01 srv1675884 CROND[2629271]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-07-04T19:01:32+0000 DEBUG baseos: using metadata from Thu 02 Jul 2026 09:24:54 AM UTC.
  • 2026-07-04T19:01:33+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-07-04T19:01:33+0000 DEBUG crb: using metadata from Thu 02 Jul 2026 09:25:20 AM UTC.
  • 2026-07-04T19:01:34+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-07-04T19:01:34+0000 DEBUG extras: using metadata from Thu 02 Jul 2026 09:25:12 AM UTC.
  • 2026-07-04T19:01:35+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-07-04T19:01:36+0000 DEBUG epel: using metadata from Sat 04 Jul 2026 12:45:14 AM UTC.
  • 2026-07-04T19:01:36+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.