Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-14T20:00:35.857133+00:00
Window starts 2026-06-14T08:00:35.857099+00:00
Uptime
up 4 weeks, 1 day, 10 hours, 47 minutes
Load
1.38 1.28 1.28
Memory
1.5Gi used / 3.8Gi total
Disk /
22G used / 49G total (44% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
140

Security

SSH activity
Failed logins: 140
Top IPs
  • 27.79.2.76 · 85 hits
  • 116.99.172.35 · 26 hits
Recent auth events
  • Jun 14 18:52:18 srv1675884 sshd-session[1560636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.2.76
  • Jun 14 18:52:19 srv1675884 sshd-session[1560636]: Failed password for invalid user test from 27.79.2.76 port 38216 ssh2
  • Jun 14 18:53:08 srv1675884 sshd-session[1560666]: Invalid user thomas from 27.79.2.76 port 54192
  • Jun 14 18:53:08 srv1675884 sshd-session[1560666]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 14 18:53:08 srv1675884 sshd-session[1560666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.2.76
  • Jun 14 18:53:10 srv1675884 sshd-session[1560666]: Failed password for invalid user thomas from 27.79.2.76 port 54192 ssh2
  • Jun 14 18:53:49 srv1675884 sshd-session[1560690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.2.76 user=root
  • Jun 14 18:53:51 srv1675884 sshd-session[1560690]: Failed password for root from 27.79.2.76 port 36848 ssh2

Web

HTTP status mix
200: 184301: 2400: 3401: 2404: 8
Top IPs
  • 34.174.207.172 · 166 hits
  • 216.73.216.46 · 10 hits
  • 104.248.27.11 · 4 hits
  • 176.65.148.24 · 2 hits
  • 159.203.169.188 · 2 hits
Recent access highlights
  • 176.65.148.24 - - [14/Jun/2026:11:01:40 +0000] "" 400 0 "-" "-" "-"
  • 159.203.169.188 - - [14/Jun/2026:12:53:04 +0000] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
  • 159.203.169.188 - - [14/Jun/2026:12:53:05 +0000] "GET /favicon.ico HTTP/1.1" 404 555 "http://77.37.47.24/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
  • 66.249.73.5 - - [14/Jun/2026:14:08:28 +0000] "GET /robots.txt HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
  • 194.233.83.141 - - [14/Jun/2026:15:36:54 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-" "-"
  • 104.248.27.11 - - [14/Jun/2026:18:47:56 +0000] "GET / HTTP/1.1" 401 179 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" "-"
  • 104.248.27.11 - - [14/Jun/2026:18:47:56 +0000] "GET /favicon.ico HTTP/1.1" 401 179 "http://hermes.india24by7.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" "-"
  • 206.189.52.7 - - [14/Jun/2026:19:39:33 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xE7\x80Q\x8E=\x8F\x05\xE4r\xBE\x7F!\x00\xC2?\xDBiz#h]\x03\x00#3/v\x1C\x81\xDB\xB6P \xCDRr\xAE\xCA\xDF=#f\xCFFj\xB3sm\xDF\x00'|\x9A\x1F\xB6IU\xEB\x0E8Wgo\x8C\x17\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 157 "-" "-" "-"

System

Recent service / journal activity
  • Jun 14 20:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 14 20:00:26 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 14 20:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 366128.
  • Jun 14 20:00:30 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 14 20:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 14 20:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 14 20:00:33 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 366129.
  • Jun 14 20:00:33 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 14 20:00:34 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 14 20:00:34 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 14 18:01:01 srv1675884 CROND[1558790]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 14 18:01:01 srv1675884 run-parts[1558793]: (/etc/cron.hourly) starting 0anacron
  • Jun 14 18:01:01 srv1675884 run-parts[1558799]: (/etc/cron.hourly) finished 0anacron
  • Jun 14 18:01:01 srv1675884 CROND[1558789]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 14 19:01:02 srv1675884 CROND[1560940]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 14 19:01:02 srv1675884 run-parts[1560943]: (/etc/cron.hourly) starting 0anacron
  • Jun 14 19:01:02 srv1675884 run-parts[1560949]: (/etc/cron.hourly) finished 0anacron
  • Jun 14 19:01:02 srv1675884 CROND[1560939]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-14T19:22:24+0000 DEBUG baseos: using metadata from Thu 11 Jun 2026 07:06:44 PM UTC.
  • 2026-06-14T19:22:25+0000 DEBUG reviving: 'crb' can be revived - repomd matches.
  • 2026-06-14T19:22:25+0000 DEBUG crb: using metadata from Thu 11 Jun 2026 07:07:10 PM UTC.
  • 2026-06-14T19:22:26+0000 DEBUG reviving: 'extras' can be revived - repomd matches.
  • 2026-06-14T19:22:26+0000 DEBUG extras: using metadata from Thu 11 Jun 2026 07:07:04 PM UTC.
  • 2026-06-14T19:22:28+0000 DEBUG reviving: 'epel' can be revived - metalink checksums match.
  • 2026-06-14T19:22:35+0000 DEBUG epel: using metadata from Sat 13 Jun 2026 12:23:05 AM UTC.
  • 2026-06-14T19:22:35+0000 INFO Metadata cache created.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.