BuiltByBit store

Jump to the docs for

KalkanReports & logs

Reports & logs

The status lines, the 24-hour report, IP and player look-ups, the console lines, the daily decision log and the ping probe.

The report

/kalkan report (or Report in the menu) sums up the last 24 hours, counted since the proxy started:

  • login attempts and unique IPs;
  • allowed, would kick, kicked and exceptions;
  • blocked types: Hosting, VPN, Tor and WARP;
  • the top networks and the top names;
  • the data file: when it was built, when it was last checked and how that went;
  • the ping probe and where the logs are.
Kalkan report: 222 login attempts from 195 unique IPs; 77 allowed, 20 would kick, 125 kicked; blocked types Hosting 111, VPN 27, Tor 7; top networks OVH, Hetzner, Amazon, Oracle, Mullvad's network and M247; top names
The report after the test flood. Real capture.

Look-ups

/kalkan ip <ip> classifies any address and shows what Kalkan would do with it under the current settings. From the test proxy, in monitor mode:

130.61.77.12 • DE • AS31898 Oracle Corporation • Hosting
Region: other country • Decision with these settings: would kick (monitor) (foreign Hosting)
[Open on Scamalytics]

/kalkan player <name> shows how many days the player joined from a clean connection (and whether that makes them trusted), whether they are on the allow list, their current connection, and their decisions in the last 24 hours.

The console

Each blocked login, exception and settings change gets a line. The same IP is logged once every 10 minutes:

[kalkan]: [MONITOR → would kick] Nova2010 (3.120.188.125) Hosting DE AS16509 Amazon.com Inc. — foreign Hosting
[kalkan]: [SETTING] ServerOwner: mode → BLOCK
[kalkan]: [ATTACK] Attack mode on: 30+ blocked-type logins in the last minute. Blocked types will be kicked for 15 min.
[kalkan]: [KICKED] Bot_8366 (3.120.168.56) Hosting DE AS16509 Amazon.com Inc. — foreign Hosting

The daily decision log

Every login decision is written to plugins/kalkan/logs/decisions-YYYY-MM-DD.tsv, one tab-separated line each:

time                 status      name         ip               country  asn     org                                    type     region  reason              bedrock
2026-10-30 17:29:19  allowed     Ezra_pvp     78.169.213.207   TR       9121    Turk Telekomunikasyon Anonim Sirketi   Clean    other                       0
2026-10-30 17:29:19  would kick  Jaden_mc     51.38.137.197    PL       16276   OVH SAS                                Hosting  other   foreign Hosting     0
2026-10-30 17:34:06  kicked      Bot_3217     185.220.100.240  DE       205100  F3 Netze e.V.                          Tor      other   foreign Tor         0
2026-10-30 17:41:52  kicked      ServerOwner  123.112.0.1      CN       4808    China Unicom Beijing Province Network  Clean    other   blocked country CN  0

Real lines from the test proxy, lined up here for reading; in the file the columns are separated by tabs. The files are kept for log-days (30) days and open in any spreadsheet.

The ping probe

ping-probe (on by default) is experimental and log only. For players who are let in, it compares the in-game ping with the TCP round trip, a hint that a rented home proxy sits in between. The measurements go to logs/ping-YYYY-MM-DD.tsv and the report shows how many sessions were measured. It never kicks anyone.