[ SECURITY OPS CENTER ]
RESTRICTED ACCESS · AUTHENTICATE TO CONTINUE
> USER:
> PASS:
[ AUTHENTICATE ]
[ SECURITY OPS CENTER // 62.109.6.164
▋
]
> nginx/1.18.0 · ModSecurity · OWASP CRS 3.3.5 · TLS 1.2/1.3 · Loki pipeline
grafana ↗
·
prometheus ↗
·
NGINX
···
REQ / SEC
···
ACTIVE CONN
···
HTTP ERRORS / MIN
···
4xx + 5xx
WAF BLOCKS / MIN
···
ModSecurity
RATE LIMITED / MIN
···
HTTP 429
BRUTE FORCE
0
IPs > threshold
SSL EXPIRY
···
min days
// TOP THREATS:
— awaiting data —
[ VHOSTS ]
[ LOGS ]
[ MODSEC ]
[ MAP ]
[ SSH ]
[ ALERTS ]
[ IP ]
ALL VHOSTS
15m
30m
1h
6h
NOW
IDLE
> FILTER:
FP: OFF
FP: SOFT
FP: MED
FP: HARD
⎘ SHARE
✕ RESET
// VHOST ERROR LOGS [ *.error.log ]
connecting...
// TOP ERROR DOMAINS [ 1h ]
loading...
// LIVE ATTACK LOG [ 4xx · 5xx · WAF ]
↓ CSV
connecting...
// TOP ATTACKING IPs [ 1h ]
loading...
// RATE LIMITED [ 429 ]
no 429s
// WAF EVENT LOG [ ModSecurity ]
PL 1-4
PL 1
PL 1-2
PL 1-3
⊘ HIDE 127.0.0.1
◎ SHOW FP
loading...
// TOP TRIGGERED RULES
loading...
// TOP WAF HOSTS
loading...
// ATTACK ORIGIN MAP [ geo-ip · last 1h ]
STALE · REFRESHING…
// TOP COUNTRIES [ 1h ]
STALE · REFRESHING…
loading...
// RECURRING ATTACKERS
— loading —
// FAILED SSH LOGINS [ last
15m
]
connecting...
// TOP BLOCKED IPs [ last
15m
]
loading...
// ALERT HISTORY
CLEAR
— no alerts triggered —
// IP INTELLIGENCE
> LOOKUP IP:
↗ LOOKUP
— or click any IP in other tabs —
← BACK
↗ CHECK IP
⎘ COPY
⊙ FILTER LOGS
LOCATION
—
NETWORK
—
CLIENT
—
THREAT LEVEL
—
TOP PATHS
STATUS CODES
USER AGENTS
REFERRERS
TIMELINE
(hits per minute)
SESSIONS
(60s gap threshold)
RECENT HITS
WAF EVENTS
ERROR LOG
SSH ATTEMPTS
⚠ BAN RECOMMENDATIONS
REPUTATION
×
TYPE:
STATUS:
IP:
SERVER:
PATH:
MESSAGE:
UPSTREAM:
REFERRER:
UA:
TYPE:
SSH
EVENT:
IP:
PORT:
PROTO:
TARGET USER:
PID:
TYPE:
RULE:
SEVERITY:
CLIENT IP:
HOST:
URI:
MESSAGE:
MATCHED:
RULE FILE:
TAGS:
RULE DESC:
REPUTATION:
↗ ABUSEIPDB
⎘ COPY IP
⎘ COPY LINE
↗ OPEN IP TAB
⊙ FILTER ALL LOGS BY THIS IP
COPIED
×