⚡ DEMO SANDBOX — Interactive preview with simulated threat data. Sign up for live protection →
Back
Overview
Protected
92
Security
Your server is well protected
KovaShield is actively blocking attacks. Your honeypot is catching probes before they reach your actual services.
✓ 23 IPs blocked
✓ 4 subnets flagged
⚠ 3 Tor nodes detected
🚨
↑ 12%
47
Total incidents logged
🚫
IPs
23
Unique IPs blocked
🧅
TOR
3
Tor exit nodes detected
🌍
GEO
8
Countries of origin
💡
What does this mean? KovaShield blocked 23 attackers out of 47 incidents. Every blocked IP is a threat that never reached your actual website. Your honeypot traps caught attackers probing for /.env, /wp-login.php, and /phpmyadmin — and sealed court-ready evidence automatically.
📈 Attack Timeline
last 24h
⚡ Recent Threats
47 total
🌍 Top Origins
⚔️ Attack Types
🎯 Top Targeted Paths
47 events
👆
Select a threat to see details
47
Total incidents
23
Unique IPs blocked
4
Subnets flagged
3
Tor exit nodes
🌍 Countries
⚔️ Attack Vectors
🎯 Targeted Paths
🏴‍☠️ Top Attackers
IPCountryHitsScoreTorStatus
🌐 Live Attack Topology
Server → Honeypots → Attackers
Your server Domain Honeypot Critical attacker High threat
👁
1,247
Unique visitors
📨
3,891
Total requests
🚫
312
Blocked
⚡
42ms
Avg response
📈 Requests Over Time
🔝 Top Paths
📱 Status Codes
🛡️
Web Application Firewall
47 rules across 12 attack categories. Blocks SQL injection, XSS, path traversal, and 40+ other attack patterns automatically.
⚔️
47
Total blocks
📋
47
Active rules
✓
12
Categories
🎯
99.2%
Accuracy
Rule Categories
CategoryMITRERulesBlockedModeActive
🛡️
Firewall rules block, allow, or challenge traffic before it hits your server. Rules run top-to-bottom. First match wins.
Active Rules
3 rules
#NameConditionActionHitsOn
⚡ Quick Templates
🧅
Block Tor exit nodes
Prevents anonymous Tor traffic from reaching your server
🤖
Block known scanners
Blocks Shodan, Censys, Masscan recon tools
💉
Block SQL injection
Detects UNION, DROP, SELECT abuse in URLs
🔐
Protect /wp-login.php
Rate-limits WordPress brute force attacks
⚡
Security Rules control how KovaShield behaves globally — evidence sealing, honeypot deception, threat feed sharing, and more.
🍯
Gotchas are fake paths, fake credentials, and canary tokens that look real to attackers but are traps. When someone hits a gotcha, KovaShield logs them, scores them, and seals court-ready evidence automatically.
🍯
18
Gotcha triggers
🎣
5
Active traps
🧅
3
Tor nodes caught
⚖️
18
Evidence sealed
🪤 Active Traps
PathTypeResponseHitsActive
🚫 Blocked IPs
23 blocked
IPCountryReasonScoreTagsLast Seen
🔒 Evidence Vault
SHA-256 + HMAC Sealed
⚖️
Court-ready evidence. Every captured attack is cryptographically sealed. The SHA-256 hash is a tamper-proof fingerprint — if anyone modifies the record, the hash changes and tampering is immediately detectable.
🕵️
Threat actor profiles track the most persistent attackers. KovaShield correlates IPs, attack patterns, timing, and tooling to identify when the same attacker returns.
🏴‍☠️ Known Threat Actors
5 profiles
Actor IDIPsFirst SeenLast SeenPrimary AttackMITREThreat Level
📋 Activity Log
real-time
TimeActorActionDetailResult