Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

After upgrading Icinga DB to 1.6, Icinga Web showed an error that Icinga DB is not running.

Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

# Cacti, LibreNMS, Icinga and Observium: measuring the monitoring tier nobody replaces Monitoring platforms accumulate. They are installed by an engineer who has since moved teams, they hold credentials that grant access to everything they watch, and they are rarely included in application asset inventories. Four ZoomEye queries for this category show what is visible when someone looks. ## Context and method Data was collected on 26 September 2026 through the ZoomEye Python SDK. `sub_type` is recorded for each result, with `web` indicating ZoomEye's web component classification. Query | sub_type | Total ---|---|--- `app="Cacti"` | all | 17,703 `app="Cacti"` | web | 246 `app="LibreNMS"` | all | 15,614 `app="LibreNMS"` | web | 306 `app="Icinga"` | all | 64 `app="Observium"` | all | 5 ## Analysis The clustering at 17,703 for Cacti and 15,614 for LibreNMS is the most useful shape in the table. Both are open source graphing platforms for network and server metrics, they serve the same audience, and they appear in similar numbers. That consistency suggests both fingerprints work about equally well and that the two products really do have comparable installed bases on reachable addresses. Icinga at 64 and Observium at 5 look like measurement failures rather than small user bases, and the honest way to state it is that both products are recognizable to the people who run them and under-identified by generic web fingerprints. Icinga is often deployed behind an authentication proxy or on an internal address because it is used by operations teams, and Observium is typically installed inside a management segment. A reader who needs the true population for either would have to scan for their specific ports and page signatures rather than rely on a product name. The risk profile of the whole category is consistent. These platforms store the credentials they use to poll the devices they monitor. Cacti in particular has a history of vulnerabilities including remote code execution, and the repeated pattern is that the flaw is exploitable by an authenticated user who then gains execution. That combination makes the login page the control point: a monitoring interface with default or reused credentials is effectively a route into everything the platform can reach. ## Implications A monitoring platform should be treated as sensitive infrastructure, which in practice means three things. Restrict the interface to the management network, and where remote access is needed, place it behind a bastion rather than exposing the platform directly. Audit the credentials the platform uses to poll other systems, and prefer per-host credentials with limited capability over a single administrative account. Keep the platform on the same patch cadence as the systems it monitors, because a monitoring server that is behind on fixes is a single point from which everything else is observable. For measurement work, the Cacti and LibreNMS figures are solid enough to track over time. An organization that runs either product can take the pattern, add its own network ranges, and get a direct answer about external reachability, which is a more useful output than any internet-wide total. ## References [1] ZoomEye cyberspace search engine. [2] Cacti security advisories.

Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

Monitor your network, servers and applications in a secure and reliable way. Keep an eye on your infrastructure and stay up-to-date with current issues.

Maintenance-only forks of abandoned upstream packages; for internal Icinga use only

Versions of Icinga 2 from 2.8 up to 2.14.9, 2.15.4, and 2.16.2 do not verify the source of certain JSON-RPC messages.