jcarr.dev

Systems & operations

The operations view of the machine serving this page.

Host vitals read from /proc, service states from systemd, a worker reporting its own throughput, and the edge detection feed. Where a value has no real read behind it, the panel says so rather than showing a number.

Host

Polled every 5s · terms marked ? are explained on hover – full glossary
Host vitals 22:23:11 UTC
Load 1m / 5m / 15m Load average The average number of processes running or waiting on I/O, over 1, 5 and 15 minutes. It is not a percentage – the figure only means something against the core count, which is why load per core sits beside it. Comparing the three windows tells you whether a spike is building or clearing. 0.00 / 0.04 / 0.00
Per core (2) Load per core Load average divided by the number of CPU cores. Sustained above 100% means work is queuing rather than running, and the machine is behind. 0.0%
Memory used Memory used Derived from MemAvailable – the kernel's own estimate of memory obtainable for new work, including cache it can reclaim. More honest than 'free', which counts cache as used and makes a perfectly healthy machine look full. 48.9%of 1.6 GB
Disk / 7.9% of 58.7 GB
Disk /tmp 7.9% of 58.7 GB
Disk /var/lib/jcarr-app 7.9% of 58.7 GB
Network rx / tx 286.0 B/s / 2.7 KB/s
TCP established TCP established Connections currently in the ESTABLISHED state, parsed from /proc/net/tcp. Only the count is taken: remote addresses are never read into anything the page can display. 8
Host uptime Host uptime Time since the kernel booted, distinct from how long the application has been running. Together the two tell you whether a service restarted or the whole machine did – a different problem with a different cause. 26d 00:50:59
Host identity X64
Operating system AlmaLinux 9.8 (Olive Jaguar)
Kernel Kernel release The running kernel version, read from /proc/version. In a container this is the host's kernel, not the image's – containers share the kernel and only bring their own userspace. 5.14.0-687.36.1.el9_8.x86_64
CPU Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
Logical processors 2
Architecture X64
Runtime .NET 10.0.10
Application uptime 22d 13:55:34
Watched units systemd unit A service managed by systemd, the init system on most modern Linux distributions. ActiveState says whether it is running; SubState says what it is actually doing, which is the more useful of the two when something is wrong. systemctl
APPLICATION ACTIVE / running
EDGE PROXY ACTIVE / running
DATABASE ACTIVE / running
INTRUSION FILTER ACTIVE / running
Packet worker NOMINAL
Queue depth Queue depth How much work is waiting to be processed. A queue climbing steadily means the consumer has fallen behind the producer, and it is usually the earliest visible symptom of trouble – before anything has actually failed or thrown an error. 0
Processed 48,125,061
CRC failures CRC (cyclic redundancy check) A checksum computed across a payload and transmitted alongside it. Recompute it on receipt and compare: if the values differ, the data changed in transit. Cheap to calculate and reliable against accidental corruption, which is why it appears in everything from Ethernet frames to tactical radio protocols. 0 since reset
Failure rate (recent) Rolling failure rate Failures across the most recent packets, not across all time. A lifetime rate looks fine and is quietly useless: the denominator grows the longer the system stays healthy, until a real fault cannot move it past any sensible threshold – the detector gets worse at its job exactly as the system gets more stable. A fixed window keeps the denominator constant. 0.0% last 250
Mean latency Mean latency An exponentially weighted moving average – recent samples count for more than older ones. It reacts quickly to a genuine shift without needing a full history buffer, and without one old outlier skewing the figure indefinitely. 0.2µs
Heartbeat Heartbeat A periodic signal a worker emits to show it is still alive. The absence is the signal: a stale heartbeat means the worker is wedged, which is precisely the failure mode that produces no error message at all. 22:23:14 UTC
Auto-resolves after 45s. One trigger per source per 10 min.
Release and availability 70b3bc5
Running commit 70b3bc5
Built 2026-08-16 08:27UTC
This run began 22d 13:55:33ago
Availability, 30 days 99.995%
Excluding planned work 100.000%
Deploys 87sacross 48
Operator restarts 26sacross 3

Baseline

Measured, not configured – escalation criteria
Pattern of life – edge activityWITHIN BASELINE
This hour (22:00 UTC) 0
Expected for this hour 1.0 ± 2.2
Deviation -0.4σ
0006121823

Mean detections per hour of day across 7 days (183 observations). Each day contributes one sample per hour, so a single loud day cannot pass itself off as the normal pattern. Today's hours are excluded from the baseline they are measured against.

Fused view

Independent sources on one time axis
All-source timeline 40 events
2026-09-07 16:15:58 EDGE SSH-FAIL 47.94.227.xxx · CN
2026-09-06 20:07:50 EDGE SSH-FAIL 137.184.56.xxx · US
2026-09-06 20:07:31 EDGE SSH-FAIL 64.227.1.xxx · US
2026-09-06 20:05:23 EDGE SSH-FAIL 137.184.56.xxx · US
2026-09-06 20:04:56 EDGE SSH-FAIL 64.227.1.xxx · US
2026-09-06 19:04:38 EDGE SSH-FAIL 167.172.61.xxx · GB
2026-09-06 19:02:18 EDGE SSH-FAIL 167.172.61.xxx · GB
2026-09-06 16:37:35 EDGE BAN 45.15.226.xxx blocked at the firewall for SSH-FAIL · MD · AS207164 PRIMANET SRL
2026-09-05 23:53:56 EDGE PATH-SCAN 20.207.201.xxx · IN · /xmlrpc.php · 404 · ×4 in window
2026-09-05 23:53:25 EDGE PATH-SCAN 20.207.201.xxx · IN · /xmlrpc.php · 404
2026-09-05 23:43:41 EDGE PATH-SCAN 45.138.16.xxx · PL · /wp-admin/admin-ajax.php · 308 · ×14 in window
2026-09-05 23:43:10 EDGE PATH-SCAN 45.138.16.xxx · PL · /wp-admin/admin-ajax.php · 308
2026-09-05 23:22:56 EDGE PATH-SCAN 34.39.141.xxx · BR · /backup.sql · 404 · ×8 in window
2026-09-05 23:22:22 EDGE PATH-SCAN 34.39.141.xxx · BR · /backup.sql · 404
2026-09-05 21:46:11 EDGE PATH-SCAN 34.14.215.xxx · IN · /.git/config · 404 · ×24 in window
2026-09-05 21:45:39 EDGE PATH-SCAN 34.14.215.xxx · IN · /.git/config · 404
2026-09-05 20:39:11 EDGE PATH-SCAN 136.107.102.xxx · US · /.env.local · 404 · ×12 in window
2026-09-05 20:38:37 EDGE BAN 136.107.102.xxx blocked at the firewall for PATH-SCAN · US · AS396982 Google LLC
2026-09-05 20:38:36 EDGE PATH-SCAN 136.107.102.xxx · US · /.env.local · 404
2026-09-05 17:08:57 EDGE PATH-SCAN 136.144.35.xxx · US · /wp-login.php · 404
2026-09-05 17:08:56 EDGE PATH-SCAN 136.144.35.xxx · US · /wp-login.php · 308
2026-09-05 15:47:59 EDGE SSH-FAIL 188.166.93.xxx · NL
2026-09-05 11:41:36 EDGE PATH-SCAN 20.198.7.xxx · IN · /wp/wp-admin/includes/ · 404 · ×16 in window
2026-09-05 11:41:11 EDGE PATH-SCAN 20.205.10.xxx · HK · /wp/wp-admin/includes/ · 404 · ×18 in window
2026-09-05 11:41:09 EDGE BAN 20.198.7.xxx blocked at the firewall for PATH-SCAN · IN · AS8075 Microsoft Corporation
2026-09-05 11:41:05 EDGE PATH-SCAN 20.198.7.xxx · IN · /wp/wp-admin/includes/ · 404
2026-09-05 11:40:45 EDGE BAN 20.205.10.xxx blocked at the firewall for PATH-SCAN · HK · AS8075 Microsoft Corporation
2026-09-05 11:40:38 EDGE PATH-SCAN 20.205.10.xxx · HK · /wp/wp-admin/includes/ · 404
2026-09-05 10:18:50 EDGE SSH-FAIL 38.49.216.xxx · CA
2026-09-05 10:18:50 EDGE BAN 38.49.216.xxx blocked at the firewall for SSH-FAIL · CA · AS26832 Rica Web Services
2026-09-05 10:18:50 EDGE SSH-FAIL 38.49.216.xxx · CA
2026-09-05 10:18:49 EDGE SSH-FAIL 38.49.216.xxx · CA
2026-09-05 10:18:48 EDGE SSH-FAIL 38.49.216.xxx · CA
2026-09-05 09:53:13 EDGE SSH-FAIL 171.212.114.xxx · CN
2026-09-05 09:30:29 EDGE PATH-SCAN 35.229.211.xxx · TW · /.git/config · 404
2026-09-05 06:29:36 EDGE PATH-SCAN 20.151.10.xxx · CA · //cgi-bin/admin.php · 404 · ×7 in window
2026-09-05 06:29:01 EDGE PATH-SCAN 20.151.10.xxx · CA · //cgi-bin/admin.php · 404
2026-09-05 06:29:01 EDGE PATH-SCAN 20.151.10.xxx · CA · /wp-content/plugins/hellopress/wp_filemanager.php · 404 · ×9 in window
2026-09-05 06:28:26 EDGE PATH-SCAN 20.151.10.xxx · CA · /wp-content/plugins/hellopress/wp_filemanager.php · 404
2026-09-05 05:12:57 EDGE PATH-SCAN 142.111.152.xxx · US · /wp-login.php · 404

Link

Measured between this node and your browser – no location lookup
Circuit to this viewer MEASURING
Round trip Round trip time How long a message takes to reach the far end and come back, timed at this end. It includes network transit, plus whatever the other end took to respond. –SAMPLING
Min / mean / max –SAMPLING
Jitter Jitter The variation between consecutive round trips. A link can be slow but perfectly steady and still carry real-time traffic fine – it is the variance that breaks things, so it is measured separately rather than hidden inside an average. –SAMPLING
Clock offset Clock offset The difference between this node's clock and the browser's, corrected for half the round trip. Clock drift quietly corrupts any log that has to be correlated across machines, and it does so without producing a single error. –
Probes this session 0

Measured across the live connection, once every 2s. No geolocation is performed and nothing about this circuit is stored – the figures exist only while the page is open. Clock offset is corrected for half the round trip.

Node declared + measured
Provider declared Declared, not measured A configured value rather than a reading. The application cannot determine which datacentre it occupies without asking an external service where its own address is, so this is labelled rather than quietly presented alongside figures that were genuinely measured. AWS Lightsail
Region declared eu-west-2
Site declared London, UK
Node clock 22:23:14 UTC
Node timezone UTC
Host uptime 26d 00:50:56

Every timestamp on this site is UTC, to the second. A distributed log is only as good as the clocks behind it, so the node runs in UTC rather than a local zone – there is no offset to reason about during an incident, and no hour that happens twice a year.

Incident

Append-only ledger – one row per observed transition
Incident timeline append-only Append-only Rows are only ever added, never edited or deleted. An incident record that can be tidied up afterwards is not evidence of anything; this one is written by the code at the moment each condition is observed. · 7 shown
20:57:06 RECOVERED CONFIRMED Post-recovery sample: queue depth 0, failure rate 0.0%, mean latency 7.2ms across 25 packets. Nominal.
20:57:05 RESTART CONFIRMED Fault cleared after 45s. Worker queue drained from 627 packets and counters reset; processing resumed at full batch size.
20:56:23 ISOLATED INFERRED Fault scoped to the packet worker: host readings show no corresponding pressure (load 0.00, memory 45.4% used, 4/4 watched units active). Failures are confined to the worker.
20:56:23 QUEUE DERIVED Queue depth 42 and climbing — consumer no longer keeping pace with a steady 25 packet/s offered rate, 3s into the event.
20:56:23 ANOMALY DERIVED Packet failure rate 6.8% exceeds 5.0% threshold across the last 250 packets processed (17 CRC mismatches since the worker last reset).
20:56:21 DEGRADED DERIVED Worker health check DEGRADED: mean processing latency 61.8ms against 40ms threshold.
20:56:20 INJECTED CONFIRMED Fault injected into the packet worker by request. The detection service is not notified and does not read this record — it observes the worker's published metrics like any other consumer.
Packet stream crc32 · ack/nack
Seq Att Sent CRC CRC (cyclic redundancy check) A checksum computed across a payload and transmitted alongside it. Recompute it on receipt and compare: if the values differ, the data changed in transit. Cheap to calculate and reliable against accidental corruption, which is why it appears in everything from Ethernet frames to tactical radio protocols. Recv CRC Latency Result ACK / NACK Acknowledged, or not acknowledged. An ACK confirms the frame arrived with its integrity check intact. A NACK reports a failed check and triggers retransmission – the failure is expected and handled, rather than being an error.
48125061 1 1c0477de 1c0477de 0.2µs ACK
48125060 1 6a0d1914 6a0d1914 0.0µs ACK
48125059 1 88f76487 88f76487 0.2µs ACK
48125058 1 0a170be2 0a170be2 0.3µs ACK
48125057 1 e7049057 e7049057 0.0µs ACK
48125056 1 78670e08 78670e08 0.3µs ACK
48125055 1 82d9b25d 82d9b25d 0.2µs ACK
48125054 1 6ab2f1a0 6ab2f1a0 0.2µs ACK
48125053 1 a079cd41 a079cd41 0.1µs ACK
48125052 1 a86494d8 a86494d8 0.2µs ACK
48125051 1 c168f425 c168f425 0.0µs ACK
48125050 1 3aa1c795 3aa1c795 0.3µs ACK
48125049 1 22526f5b 22526f5b 0.2µs ACK
48125048 1 b04e7d84 b04e7d84 0.2µs ACK

Edge security

Sources masked to /24 · detail retained 30 days
Edge detections delayed Feed delay Detections are held briefly before appearing publicly. The evidence is identical a moment later, but an attacker no longer gets a live readout of which requests trip a filter or how close they are to being blocked. The exact delay is deliberately not published – printing it would give back what the delay is there to withhold. · sources masked Masked source The final octet is zeroed before anything is stored or displayed. Enough to tell two sources apart and attribute a network, without retaining data that identifies a person. The full address exists only in memory, for the moment it takes to look up its country.
Detections 24h
1
Bans 24h
0
Currently jailed fail2ban Watches log files for patterns that indicate abuse and blocks the source at the firewall for a set period. The block happens at the packet level, so a banned host never reaches the application at all.
0
Top sources 24h Geolocation Resolving an address to a country and network. Done here against a database file held on this machine, so the address never leaves the process – sending visitor addresses to a third-party lookup service would defeat the point of masking them.
China 1
16:37:35 UNBAN 45.15.226.xxx · MD · AS207164 PRIMANET SRL
16:15:58 SSH-FAIL 47.94.227.xxx · CN China Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS37963 Hangzhou Alibaba Advertising Co.,Ltd.
20:07:50 SSH-FAIL 137.184.56.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
20:07:31 SSH-FAIL 64.227.1.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
20:05:23 SSH-FAIL 137.184.56.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
20:04:56 SSH-FAIL 64.227.1.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
19:04:38 SSH-FAIL 167.172.61.xxx · GB United Kingdom Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
19:02:18 SSH-FAIL 167.172.61.xxx · GB United Kingdom Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
16:37:35 BAN 45.15.226.xxx · MD · AS207164 PRIMANET SRL
10:18:50 UNBAN 38.49.216.xxx · CA · AS26832 Rica Web Services
23:53:56 PATH-SCAN 20.207.201.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /xmlrpc.php · 404 · AS8075 Microsoft Corporation
23:53:25 PATH-SCAN 20.207.201.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /xmlrpc.php · 404 · AS8075 Microsoft Corporation
23:43:41 PATH-SCAN 45.138.16.xxx · PL Poland Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-admin/admin-ajax.php · 308 · AS210558 1337 Services GmbH
23:43:10 PATH-SCAN 45.138.16.xxx · PL Poland Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-admin/admin-ajax.php · 308 · AS210558 1337 Services GmbH
23:22:56 PATH-SCAN 34.39.141.xxx · BR Brazil Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /backup.sql · 404 · AS396982 Google LLC
23:22:22 PATH-SCAN 34.39.141.xxx · BR Brazil Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /backup.sql · 404 · AS396982 Google LLC
21:46:11 PATH-SCAN 34.14.215.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.git/config · 404 · AS396982 Google LLC
21:45:39 PATH-SCAN 34.14.215.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.git/config · 404 · AS396982 Google LLC
21:38:36 UNBAN 136.107.102.xxx · US · AS396982 Google LLC
20:39:11 PATH-SCAN 136.107.102.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.env.local · 404 · AS396982 Google LLC
20:38:37 BAN 136.107.102.xxx · US · AS396982 Google LLC
20:38:36 PATH-SCAN 136.107.102.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.env.local · 404 · AS396982 Google LLC
17:08:57 PATH-SCAN 136.144.35.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-login.php · 404 · AS396356 Latitude.sh
17:08:56 PATH-SCAN 136.144.35.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-login.php · 308 · AS396356 Latitude.sh
15:47:59 SSH-FAIL 188.166.93.xxx · NL The Netherlands Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
12:41:09 UNBAN 20.198.7.xxx · IN · AS8075 Microsoft Corporation
12:40:44 UNBAN 20.205.10.xxx · HK · AS8075 Microsoft Corporation
11:41:36 PATH-SCAN 20.198.7.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp/wp-admin/includes/ · 404 · AS8075 Microsoft Corporation
11:41:11 PATH-SCAN 20.205.10.xxx · HK Hong Kong Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp/wp-admin/includes/ · 404 · AS8075 Microsoft Corporation
11:41:09 BAN 20.198.7.xxx · IN · AS8075 Microsoft Corporation
11:41:05 PATH-SCAN 20.198.7.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp/wp-admin/includes/ · 404 · AS8075 Microsoft Corporation
11:40:45 BAN 20.205.10.xxx · HK · AS8075 Microsoft Corporation
11:40:38 PATH-SCAN 20.205.10.xxx · HK Hong Kong Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp/wp-admin/includes/ · 404 · AS8075 Microsoft Corporation
11:34:11 UNBAN 220.90.220.xxx · KR · AS4766 Korea Telecom
10:18:50 SSH-FAIL 38.49.216.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS26832 Rica Web Services
10:18:50 BAN 38.49.216.xxx · CA · AS26832 Rica Web Services
10:18:50 SSH-FAIL 38.49.216.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS26832 Rica Web Services
10:18:49 SSH-FAIL 38.49.216.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS26832 Rica Web Services
10:18:48 SSH-FAIL 38.49.216.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS26832 Rica Web Services
09:53:13 SSH-FAIL 171.212.114.xxx · CN China Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS4134 Chinanet
09:30:29 PATH-SCAN 35.229.211.xxx · TW Taiwan Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.git/config · 404 · AS396982 Google LLC
06:29:36 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · //cgi-bin/admin.php · 404 · AS8075 Microsoft Corporation
06:29:01 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · //cgi-bin/admin.php · 404 · AS8075 Microsoft Corporation
06:29:01 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-content/plugins/hellopress/wp_filemanager.php · 404 · AS8075 Microsoft Corporation
06:28:26 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-content/plugins/hellopress/wp_filemanager.php · 404 · AS8075 Microsoft Corporation
05:12:57 PATH-SCAN 142.111.152.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-login.php · 404 · AS212238 Datacamp Limited
05:12:56 PATH-SCAN 142.111.152.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-login.php · 308 · AS212238 Datacamp Limited
03:07:59 UNBAN 34.186.61.xxx · US · AS396982 Google LLC
02:08:31 PATH-SCAN 34.186.61.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.git/config · 404 · AS396982 Google LLC
02:07:59 BAN 34.186.61.xxx · US · AS396982 Google LLC
02:07:58 PATH-SCAN 34.186.61.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /.git/config · 404 · AS396982 Google LLC
01:28:20 UNBAN 20.151.10.xxx · CA · AS8075 Microsoft Corporation
01:28:10 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
00:28:51 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · //cgi-bin/admin.php · 404 · AS8075 Microsoft Corporation
00:28:20 BAN 20.151.10.xxx · CA · AS8075 Microsoft Corporation
00:28:16 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · //cgi-bin/admin.php · 404 · AS8075 Microsoft Corporation
00:28:16 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-content/plugins/hellopress/wp_filemanager.php · 308 · AS8075 Microsoft Corporation
00:27:44 PATH-SCAN 20.151.10.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /wp-content/plugins/hellopress/wp_filemanager.php · 308 · AS8075 Microsoft Corporation
23:19:46 PATH-SCAN 20.198.7.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /xmlrpc.php · 404 · AS8075 Microsoft Corporation
23:19:12 PATH-SCAN 20.198.7.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · /xmlrpc.php · 404 · AS8075 Microsoft Corporation
IP jail Jail A fail2ban ruleset: which log to watch, which pattern counts as a failure, how many failures earn a ban, and how long the ban lasts. 0 held

No addresses currently held. Bans are actioned by fail2ban at the edge from the same access log this page reads; this panel reflects the live jail.

What this application is allowed to read

A public dashboard that reads from the host it runs on is a shell injection waiting to happen. So the read surface is a closed list, fixed at compile time. Every entry below is a literal constant or a value from a closed enum; there is no code path in which a request, a visitor, or any other external input influences what is read. Nothing is assembled by string concatenation and no shell is involved.

SourceMethodSurfaces
/proc/loadavgFile readCPU load 1/5/15 min
/proc/meminfoFile readMemory total, available, used %
/proc/uptimeFile readHost uptime
/proc/net/devFile readNetwork throughput, measured across samples
/proc/net/tcp · tcp6File readEstablished connection count only – no addresses
DriveInfo.NET APIDisk usage per volume
/etc/os-releaseFile readDistribution name and version
/proc/cpuinfoFile readCPU model, read once at startup
/proc/versionFile readKernel release, read once at startup
RuntimeInformation.NET APIKernel string and architecture – the runtime makes the uname call, so this application spawns nothing
systemctl showFixed argument listUnit state – unit name from a four-value enum
journalctl -n 20Fixed argument listLog tail for diagnosis – same enum, literal line count
ss -sFixed, zero argumentsSocket summary counts
fail2ban-client statusFixed argument listLive jail contents – one hardcoded jail name

The one endpoint on this site that changes anything is the fault trigger, and it is rate limited to one call per source every ten minutes behind a config flag that disables it outright.

Connection to the server was lost. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please reload the page.