- green: OK, no downtime
Through the afternoon and evening we watched the server every 30 minutes and blocked dozens of addresses running automated scans (WordPress login guessing and searches for leaked password files). We also raised the firewall's capacity so old blocks don't drop off, and merged our servers' block lists so an attacker blocked on one is blocked on all of them.