Some instances of the deployment-prep projects are not monitored by Icinga:
http://icinga.wmflabs.org/cgi-bin/icinga/status.cgi?hostgroup=deployment-prep&style=detail
The NRPE daemon is listening on port 5666.
The project has a default security rule to allow 5666 from 10.4.0.0/21.
Version: unspecified
Severity: normal