Security report
Who knocks on this server, and what keeps them out.
Like every server on the internet, this one is probed all day by automated scanners. These are the numbers, counted on the server and updated every morning (UTC). We publish no addresses, no user names and no detail that would help an attacker.
The period in numbers
—
Attack attempts
in the period
—
Distinct sources
different addresses that attacked
—
Addresses blocked
banned automatically after repeated tries
Attack attempts per day
Each bar is one UTC day. Point at a bar for its numbers.
Show the numbers as a table
| Day | Sources | Blocked | Attempts |
|---|
What they tried
Attempts in the period, by kind. Every one of them failed or was refused.
Where the traffic came from
Distinct attacking addresses by country. A country is where an address is registered, not where the attacker sits: most attacks come from rented servers and hijacked machines.
Month by month
| Month | Days counted | Attempts |
|---|
How the site is protected
- Logins
- The server accepts keys only. There are no passwords to guess, so password-guessing bots cannot get in.
- Blocking
- Addresses that keep trying are blocked automatically. Repeat offenders are blocked for longer, up to weeks.
- Rate limits
- Each address may make only a limited number of requests. Floods are refused before they reach the site.
- Encryption
- Every page is served over HTTPS only.
- No third parties
- The site loads nothing from other companies: no trackers, no ad scripts, no outside fonts.
- Watching
- Every attempt is recorded and checked every five minutes. Serious events alert the operator at once.
About these numbers
- Counted on our own server from its logs. Only complete UTC days are shown; today appears tomorrow.
- An attempt is one try: one login with a made-up user name, one request for a file that only an attacker would ask for, one refused flood request.
- Numbers from 1 to 9 are shown as <10. Countries with fewer than 5 attacking addresses are counted under "Other countries".
- Packets dropped by the firewall are not counted here.
- The records start when the full set of logs starts.
- The full records, with addresses, are kept for 90 days and only the operator can read them. Daily counts without addresses are kept for a year. See the privacy page.
- The raw data of this page: report.json.