Threat tracker & IP blocking

Threat Tracker

The site now runs active threat monitoring on every request. Bots, scanners, and bad actors get logged and blocked automatically — no admin intervention needed.

What It Does

Pattern detection fires on anything that looks like automated probing: path traversal attempts, injection strings, credential stuffing signatures, known scanner user-agents, and rapid-fire request patterns from a single IP.

Tiered response — first strike gets logged. Repeat offenders get rate-limited. Persistent attackers get hard-blocked automatically.

Admin visibility — the Control Panel has a live threat log showing source IP, threat type, request path, timestamp, and block status.