jcarr.dev

Systems & operations

The operations view of the machine serving this page.

Host vitals read from /proc, service states from systemd, a worker reporting its own throughput, and the edge detection feed. Where a value has no real read behind it, the panel says so rather than showing a number.

Host

Polled every 5s · terms marked ? are explained on hover – full glossary
Host vitals 15:26:06 UTC
Load 1m / 5m / 15m Load average The average number of processes running or waiting on I/O, over 1, 5 and 15 minutes. It is not a percentage – the figure only means something against the core count, which is why load per core sits beside it. Comparing the three windows tells you whether a spike is building or clearing. 0.08 / 0.06 / 0.01
Per core (2) Load per core Load average divided by the number of CPU cores. Sustained above 100% means work is queuing rather than running, and the machine is behind. 4.0%
Memory used Memory used Derived from MemAvailable – the kernel's own estimate of memory obtainable for new work, including cache it can reclaim. More honest than 'free', which counts cache as used and makes a perfectly healthy machine look full. 52.7%of 1.6 GB
Disk / 8.1% of 58.7 GB
Disk /tmp 8.1% of 58.7 GB
Disk /var/lib/jcarr-app 8.1% of 58.7 GB
Network rx / tx 19.2 B/s / 0.0 B/s
TCP established TCP established Connections currently in the ESTABLISHED state, parsed from /proc/net/tcp. Only the count is taken: remote addresses are never read into anything the page can display. 6
Host uptime Host uptime Time since the kernel booted, distinct from how long the application has been running. Together the two tell you whether a service restarted or the whole machine did – a different problem with a different cause. 71d 17:53:53
Host identity X64
Operating system AlmaLinux 9.8 (Olive Jaguar)
Kernel Kernel release The running kernel version, read from /proc/version. In a container this is the host's kernel, not the image's – containers share the kernel and only bring their own userspace. 5.14.0-687.36.1.el9_8.x86_64
CPU Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
Logical processors 2
Architecture X64
Runtime .NET 10.0.10
Application uptime 68d 06:58:28
Watched units systemd unit A service managed by systemd, the init system on most modern Linux distributions. ActiveState says whether it is running; SubState says what it is actually doing, which is the more useful of the two when something is wrong. systemctl
APPLICATION ACTIVE / running
EDGE PROXY ACTIVE / running
DATABASE ACTIVE / running
INTRUSION FILTER ACTIVE / running
Packet worker NOMINAL
Queue depth Queue depth How much work is waiting to be processed. A queue climbing steadily means the consumer has fallen behind the producer, and it is usually the earliest visible symptom of trouble – before anything has actually failed or thrown an error. 0
Processed 146,858,204
CRC failures CRC (cyclic redundancy check) A checksum computed across a payload and transmitted alongside it. Recompute it on receipt and compare: if the values differ, the data changed in transit. Cheap to calculate and reliable against accidental corruption, which is why it appears in everything from Ethernet frames to tactical radio protocols. 0 since reset
Failure rate (recent) Rolling failure rate Failures across the most recent packets, not across all time. A lifetime rate looks fine and is quietly useless: the denominator grows the longer the system stays healthy, until a real fault cannot move it past any sensible threshold – the detector gets worse at its job exactly as the system gets more stable. A fixed window keeps the denominator constant. 0.0% last 250
Mean latency Mean latency An exponentially weighted moving average – recent samples count for more than older ones. It reacts quickly to a genuine shift without needing a full history buffer, and without one old outlier skewing the figure indefinitely. 0.2µs
Heartbeat Heartbeat A periodic signal a worker emits to show it is still alive. The absence is the signal: a stale heartbeat means the worker is wedged, which is precisely the failure mode that produces no error message at all. 15:26:08 UTC
Auto-resolves after 45s. One trigger per source per 10 min.
Release and availability 70b3bc5
Running commit 70b3bc5
Built 2026-08-16 08:27UTC
Availability, 30 days 100.000%
Excluding planned work 100.000%

No interruption recorded in this window. The window starts at the first process start on record, not 30 days ago, so it never claims uptime from before the site existed.

Baseline

Measured, not configured – escalation criteria
Pattern of life – edge activityWITHIN BASELINE
This hour (15:00 UTC) 0
Expected for this hour 0.1 ± 0.4
Deviation -0.4σ
0006121823

Mean detections per hour of day across 7 days (33 observations). Each day contributes one sample per hour, so a single loud day cannot pass itself off as the normal pattern. Today's hours are excluded from the baseline they are measured against.

Fused view

Independent sources on one time axis
All-source timeline 40 events
2026-10-23 07:00:15 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-23 05:00:08 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-23 03:01:44 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-22 22:59:47 EDGE SSH-FAIL 210.16.103.xxx · IN
2026-10-22 22:59:47 EDGE BAN 210.16.103.xxx blocked at the firewall for SSH-FAIL · IN · AS133296 Web Werks India Pvt. Ltd.
2026-10-22 22:59:46 EDGE SSH-FAIL 210.16.103.xxx · IN
2026-10-22 22:59:46 EDGE SSH-FAIL 210.16.103.xxx · IN
2026-10-22 18:08:22 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-22 15:08:22 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-22 13:09:19 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-22 07:20:42 EDGE SSH-FAIL 34.62.253.xxx · BE
2026-10-21 22:19:21 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-21 13:27:25 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-21 08:27:31 EDGE SSH-FAIL 139.19.117.xxx · DE
2026-10-21 02:31:06 EDGE SSH-FAIL 34.79.89.xxx · BE
2026-10-20 22:16:22 EDGE SSH-FAIL 167.99.168.xxx · US
2026-10-20 22:13:55 EDGE SSH-FAIL 167.99.168.xxx · US
2026-10-20 16:19:53 EDGE BAN 189.222.55.xxx blocked at the firewall for SSH-FAIL · MX · AS8151 UNINET
2026-10-20 16:19:53 EDGE SSH-FAIL 189.222.55.xxx · MX
2026-10-20 16:19:49 EDGE SSH-FAIL 189.222.55.xxx · MX
2026-10-20 05:12:25 EDGE SSH-FAIL 99.230.124.xxx · CA
2026-10-20 05:12:25 EDGE SSH-FAIL 99.230.124.xxx · CA
2026-10-19 21:20:27 EDGE SSH-FAIL 5.39.70.xxx · FR
2026-10-19 12:05:36 EDGE SSH-FAIL 104.214.173.xxx · HK
2026-10-19 12:05:36 EDGE BAN 104.214.173.xxx blocked at the firewall for SSH-FAIL · HK · AS8075 Microsoft Corporation
2026-10-19 12:05:34 EDGE SSH-FAIL 104.214.173.xxx · HK
2026-10-19 12:05:20 EDGE SSH-FAIL 104.214.173.xxx · HK
2026-10-19 06:48:25 EDGE SSH-FAIL 34.76.134.xxx · BE
2026-10-18 22:11:35 EDGE SSH-FAIL 213.168.248.xxx · GB
2026-10-18 02:39:36 EDGE SSH-FAIL 34.78.78.xxx · BE
2026-10-18 00:19:14 EDGE SSH-FAIL 157.245.238.xxx · US
2026-10-18 00:18:06 EDGE SSH-FAIL 142.93.19.xxx · US
2026-10-18 00:08:38 EDGE SSH-FAIL 206.189.215.xxx · US
2026-10-16 22:07:36 EDGE SSH-FAIL 165.232.104.xxx · GB
2026-10-16 22:05:22 EDGE SSH-FAIL 165.232.104.xxx · GB
2026-10-16 21:52:21 EDGE SSH-FAIL 64.227.34.xxx · GB
2026-10-15 12:15:58 EDGE BAN 223.134.89.xxx blocked at the firewall for SSH-FAIL · JP · AS2527 Sony Network Communications Inc.
2026-10-14 23:14:44 EDGE SSH-FAIL 223.29.201.xxx · IN
2026-10-14 17:47:22 EDGE BAN 154.58.4.xxx blocked at the firewall for SSH-FAIL · ES · AS174 Cogent Communications
2026-10-14 17:47:21 EDGE SSH-FAIL 154.58.4.xxx · ES

Link

Measured between this node and your browser – no location lookup
Circuit to this viewer MEASURING
Round trip Round trip time How long a message takes to reach the far end and come back, timed at this end. It includes network transit, plus whatever the other end took to respond. –SAMPLING
Min / mean / max –SAMPLING
Jitter Jitter The variation between consecutive round trips. A link can be slow but perfectly steady and still carry real-time traffic fine – it is the variance that breaks things, so it is measured separately rather than hidden inside an average. –SAMPLING
Clock offset Clock offset The difference between this node's clock and the browser's, corrected for half the round trip. Clock drift quietly corrupts any log that has to be correlated across machines, and it does so without producing a single error. –
Probes this session 0

Measured across the live connection, once every 2s. No geolocation is performed and nothing about this circuit is stored – the figures exist only while the page is open. Clock offset is corrected for half the round trip.

Node declared + measured
Provider declared Declared, not measured A configured value rather than a reading. The application cannot determine which datacentre it occupies without asking an external service where its own address is, so this is labelled rather than quietly presented alongside figures that were genuinely measured. AWS Lightsail
Region declared eu-west-2
Site declared London, UK
Node clock 15:26:08 UTC
Node timezone UTC
Host uptime 71d 17:53:51

Every timestamp on this site is UTC, to the second. A distributed log is only as good as the clocks behind it, so the node runs in UTC rather than a local zone – there is no offset to reason about during an incident, and no hour that happens twice a year.

Incident

Append-only ledger – one row per observed transition
Incident timeline append-only Append-only Rows are only ever added, never edited or deleted. An incident record that can be tidied up afterwards is not evidence of anything; this one is written by the code at the moment each condition is observed. · 7 shown
20:57:06 RECOVERED CONFIRMED Post-recovery sample: queue depth 0, failure rate 0.0%, mean latency 7.2ms across 25 packets. Nominal.
20:57:05 RESTART CONFIRMED Fault cleared after 45s. Worker queue drained from 627 packets and counters reset; processing resumed at full batch size.
20:56:23 ISOLATED INFERRED Fault scoped to the packet worker: host readings show no corresponding pressure (load 0.00, memory 45.4% used, 4/4 watched units active). Failures are confined to the worker.
20:56:23 QUEUE DERIVED Queue depth 42 and climbing — consumer no longer keeping pace with a steady 25 packet/s offered rate, 3s into the event.
20:56:23 ANOMALY DERIVED Packet failure rate 6.8% exceeds 5.0% threshold across the last 250 packets processed (17 CRC mismatches since the worker last reset).
20:56:21 DEGRADED DERIVED Worker health check DEGRADED: mean processing latency 61.8ms against 40ms threshold.
20:56:20 INJECTED CONFIRMED Fault injected into the packet worker by request. The detection service is not notified and does not read this record — it observes the worker's published metrics like any other consumer.
Packet stream crc32 · ack/nack
Seq Att Sent CRC CRC (cyclic redundancy check) A checksum computed across a payload and transmitted alongside it. Recompute it on receipt and compare: if the values differ, the data changed in transit. Cheap to calculate and reliable against accidental corruption, which is why it appears in everything from Ethernet frames to tactical radio protocols. Recv CRC Latency Result ACK / NACK Acknowledged, or not acknowledged. An ACK confirms the frame arrived with its integrity check intact. A NACK reports a failed check and triggers retransmission – the failure is expected and handled, rather than being an error.
146858204 1 a2b87618 a2b87618 0.1µs ACK
146858203 1 22bcb72b 22bcb72b 0.8µs ACK
146858202 1 928d70a2 928d70a2 0.1µs ACK
146858201 1 61d769f9 61d769f9 0.2µs ACK
146858200 1 b85a686a b85a686a 0.2µs ACK
146858199 1 cdb335eb cdb335eb 0.2µs ACK
146858198 1 6dbf7218 6dbf7218 0.1µs ACK
146858197 1 bb923606 bb923606 0.1µs ACK
146858196 1 ff327206 ff327206 0.2µs ACK
146858195 1 34c961ce 34c961ce 0.4µs ACK
146858194 1 4890076e 4890076e 0.1µs ACK
146858193 1 929f1f2d 929f1f2d 0.1µs ACK
146858192 1 99d77cd3 99d77cd3 0.1µs ACK
146858191 1 de4cd510 de4cd510 0.1µs ACK

Edge security

Sources masked to /24 · detail retained 30 days
Edge detections delayed Feed delay Detections are held briefly before appearing publicly. The evidence is identical a moment later, but an attacker no longer gets a live readout of which requests trip a filter or how close they are to being blocked. The exact delay is deliberately not published – printing it would give back what the delay is there to withhold. · sources masked Masked source The final octet is zeroed before anything is stored or displayed. Enough to tell two sources apart and attribute a network, without retaining data that identifies a person. The full address exists only in memory, for the moment it takes to look up its country.
Detections 24h
7
Bans 24h
1
Currently jailed fail2ban Watches log files for patterns that indicate abuse and blocks the source at the firewall for a set period. The block happens at the packet level, so a banned host never reaches the application at all.
0
Top sources 24h Geolocation Resolving an address to a country and network. Done here against a database file held on this machine, so the address never leaves the process – sending visitor addresses to a third-party lookup service would defeat the point of masking them.
Germany 4
India 3
07:00:15 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
05:00:08 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
03:01:44 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
22:59:47 SSH-FAIL 210.16.103.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS133296 Web Werks India Pvt. Ltd.
22:59:47 BAN 210.16.103.xxx · IN · AS133296 Web Werks India Pvt. Ltd.
22:59:46 SSH-FAIL 210.16.103.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS133296 Web Werks India Pvt. Ltd.
22:59:46 SSH-FAIL 210.16.103.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS133296 Web Werks India Pvt. Ltd.
18:08:22 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
15:08:22 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
13:09:19 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
07:20:42 SSH-FAIL 34.62.253.xxx · BE Belgium Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS396982 Google LLC
22:19:21 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
16:19:53 UNBAN 189.222.55.xxx · MX · AS8151 UNINET
13:27:25 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
08:27:31 SSH-FAIL 139.19.117.xxx · DE Germany Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
02:31:06 SSH-FAIL 34.79.89.xxx · BE Belgium Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS396982 Google LLC
22:16:22 SSH-FAIL 167.99.168.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
22:13:55 SSH-FAIL 167.99.168.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
16:19:53 BAN 189.222.55.xxx · MX · AS8151 UNINET
16:19:53 SSH-FAIL 189.222.55.xxx · MX Mexico Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS8151 UNINET
16:19:49 SSH-FAIL 189.222.55.xxx · MX Mexico Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS8151 UNINET
12:05:36 UNBAN 104.214.173.xxx · HK · AS8075 Microsoft Corporation
05:12:25 SSH-FAIL 99.230.124.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS812 Rogers Communications Canada Inc.
05:12:25 SSH-FAIL 99.230.124.xxx · CA Canada Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS812 Rogers Communications Canada Inc.
21:20:27 SSH-FAIL 5.39.70.xxx · FR France Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS16276 OVH SAS
12:05:36 SSH-FAIL 104.214.173.xxx · HK Hong Kong Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS8075 Microsoft Corporation
12:05:36 BAN 104.214.173.xxx · HK · AS8075 Microsoft Corporation
12:05:34 SSH-FAIL 104.214.173.xxx · HK Hong Kong Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS8075 Microsoft Corporation
12:05:20 SSH-FAIL 104.214.173.xxx · HK Hong Kong Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS8075 Microsoft Corporation
06:48:25 SSH-FAIL 34.76.134.xxx · BE Belgium Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS396982 Google LLC
22:11:35 SSH-FAIL 213.168.248.xxx · GB United Kingdom Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS63949 Akamai Technologies, Inc.
02:39:36 SSH-FAIL 34.78.78.xxx · BE Belgium Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS396982 Google LLC
00:19:14 SSH-FAIL 157.245.238.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
00:18:06 SSH-FAIL 142.93.19.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
00:08:38 SSH-FAIL 206.189.215.xxx · US United States Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
22:07:36 SSH-FAIL 165.232.104.xxx · GB United Kingdom Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
22:05:22 SSH-FAIL 165.232.104.xxx · GB United Kingdom Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
21:52:21 SSH-FAIL 64.227.34.xxx · GB United Kingdom Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS14061 DigitalOcean, LLC
12:15:57 UNBAN 223.134.89.xxx · JP · AS2527 Sony Network Communications Inc.
17:47:21 UNBAN 154.58.4.xxx · ES · AS174 Cogent Communications
12:15:58 BAN 223.134.89.xxx · JP · AS2527 Sony Network Communications Inc.
23:14:44 SSH-FAIL 223.29.201.xxx · IN India Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS45804 Meghbela Cable & Broadband Services (P) Ltd
17:47:22 BAN 154.58.4.xxx · ES · AS174 Cogent Communications
17:47:21 SSH-FAIL 154.58.4.xxx · ES Spain Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS174 Cogent Communications
17:47:05 SSH-FAIL 154.58.4.xxx · ES Spain Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS174 Cogent Communications
17:46:57 SSH-FAIL 154.58.4.xxx · ES Spain Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS174 Cogent Communications
06:43:03 UNBAN 109.67.156.xxx · IL · AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.
03:19:30 UNBAN 189.80.229.xxx · BR · AS7738 V tal
02:56:52 UNBAN 221.207.55.xxx · CN · AS4837 CHINA UNICOM China169 Backbone
22:28:45 UNBAN 159.223.59.xxx · SG · AS14061 DigitalOcean, LLC
14:59:06 UNBAN 35.187.231.xxx · SG · AS396982 Google LLC
06:43:03 BAN 109.67.156.xxx · IL · AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.
06:43:03 SSH-FAIL 109.67.156.xxx · IL Israel Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.
06:43:02 SSH-FAIL 109.67.156.xxx · IL Israel Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.
06:43:01 SSH-FAIL 109.67.156.xxx · IL Israel Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.
06:43:01 SSH-FAIL 109.67.156.xxx · IL Israel Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS6810 "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD.
05:44:13 SSH-FAIL 34.62.22.xxx · BE Belgium Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS396982 Google LLC
03:19:30 BAN 189.80.229.xxx · BR · AS7738 V tal
02:56:52 BAN 221.207.55.xxx · CN · AS4837 CHINA UNICOM China169 Backbone
02:56:52 SSH-FAIL 221.207.55.xxx · CN China Where this network is registered. It is not where the operator is – server capacity is rented anywhere, so the network below is the more useful identifier. · AS4837 CHINA UNICOM China169 Backbone
IP jail Jail A fail2ban ruleset: which log to watch, which pattern counts as a failure, how many failures earn a ban, and how long the ban lasts. 0 held

No addresses currently held. Bans are actioned by fail2ban at the edge from the same access log this page reads; this panel reflects the live jail.

What this application is allowed to read

A public dashboard that reads from the host it runs on is a shell injection waiting to happen. So the read surface is a closed list, fixed at compile time. Every entry below is a literal constant or a value from a closed enum; there is no code path in which a request, a visitor, or any other external input influences what is read. Nothing is assembled by string concatenation and no shell is involved.

SourceMethodSurfaces
/proc/loadavgFile readCPU load 1/5/15 min
/proc/meminfoFile readMemory total, available, used %
/proc/uptimeFile readHost uptime
/proc/net/devFile readNetwork throughput, measured across samples
/proc/net/tcp · tcp6File readEstablished connection count only – no addresses
DriveInfo.NET APIDisk usage per volume
/etc/os-releaseFile readDistribution name and version
/proc/cpuinfoFile readCPU model, read once at startup
/proc/versionFile readKernel release, read once at startup
RuntimeInformation.NET APIKernel string and architecture – the runtime makes the uname call, so this application spawns nothing
systemctl showFixed argument listUnit state – unit name from a four-value enum
journalctl -n 20Fixed argument listLog tail for diagnosis – same enum, literal line count
ss -sFixed, zero argumentsSocket summary counts
fail2ban-client statusFixed argument listLive jail contents – one hardcoded jail name

The one endpoint on this site that changes anything is the fault trigger, and it is rate limited to one call per source every ten minutes behind a config flag that disables it outright.

Connection to the server was lost. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please reload the page.