Servers
The InfraFence Servers page and server console - status, the five tabs, bans and SSH sessions, host metrics, the security score and how to remove a server.
Last updated:
The Servers page
Servers lists every server of the organization with its agent, security score, events in the last 24 hours, and CPU, memory and disk. Filter by All, Online or Offline, or search by name or IP. Badges show Update available, Installing and Not reporting. Add server is the primary action; on Starter the header shows how many of the one included server you use.
A server that stops sending its 60-second heartbeat shows Not reporting, with the time of its last signal. Its history stays available.
The server console
Open a server to see its header (hostname, status, IP, operating system, agent version, last seen) and five tabs.
Overview
Detections by category for the last 24 hours (click a category to filter), and the event stream, newest first, filterable by category, severity and address. Each event opens with What it means, What InfraFence did and What to do.
Security
The security score, the Hardening check, Vulnerabilities (CVE) and the malware findings. See Hardening and vulnerabilities and Malware.
Network
- Active bans, with address, country, reason, start, end and how many times the address was banned. For each: Change duration (5 minutes to permanent), Unban now, Add to whitelist.
- Blocked countries on this server only, in addition to the ones blocked on every server (shown above them): see Country blocking.
- SSH sessions with their risk score.
- The state of the server's firewall.
Host
Resource charts over 6 hours, 48 hours, 7 or 30 days: a point every 5 minutes up to 48 hours (the last one live), then a point per hour with its average and the CPU peak. The 5-minute points are kept 48 hours, the hourly ones 90 days. Then Host facts, and Host compatibility: the result of the agent's read-only check.
Settings
Remove this server (owners and admins).
Security score
Each server gets a score from 0 to 100, with a grade: A from 90, B from 75, C from 60, D from 40, F below. It starts at 100 and loses points, each item up to a cap:
| Item | Points lost |
|---|---|
| Failed hardening checks | up to 25, in proportion |
| Packages with vulnerabilities exploited in the wild (CISA KEV) | 8 each, up to 24 |
| Other packages with critical or high vulnerabilities | 2 each, up to 12 (both CVE items together at most 30) |
| Database or admin ports exposed to the internet | 8 each, up to 16 |
| Open malware findings | 10 for a critical one, 3 otherwise, up to 20 |
| Monitor mode | 10 |
| Outdated agent | 5 |
| An owner or admin without two-factor authentication | 5 |
The organization's score is the average of its servers, with its 30-day trend and the Top fixes. Every plan sees the score; applying the fixes in one click is part of Pro.
Remove a server
First uninstall the agent. Then, on the server's Settings tab, Remove this server and type the hostname to confirm. It deletes the server with all its events, bans and scans.