Nginx Watcher

Log'larından Saldırıyı Yakala,
Toplulukla Paylaş Catch Attacks From Your Logs,
Share With the Community

Nginx Watcher, SiberKapan platformuyla entegre çalışan açık kaynak bir log izleme agent'ıdır. Tek komutla kur — nginx access log'unu canlı izler, 404/auth flood, exploit path imzaları ve scanner User-Agent'larını tespit eder, saldırgan IP'leri otomatik olarak SiberKapan'a bildirir. Nginx Watcher is an open-source log monitoring agent that integrates with the SiberKapan platform. Install with one command — it monitors your nginx access log in real time, detects 404/auth floods, exploit path signatures, and scanner User-Agents, and automatically reports attacker IPs to SiberKapan.

Kurulum — tek komut Installation — single command

$ curl -fsSL https://siberkapan.org/nginx-watcher/install.sh | sudo bash -s -- --key=API_ANAHTARINIZ

Canlı Nginx Watcher İstatistikleri Live Nginx Watcher Statistics

53931

Toplam Tespit Edilen Olay Total Detected Events

23400

Unique Saldırgan IP Unique Attacker IPs

Aktif Watcher Agent'ı Active Watcher Agents

PATH SIGNATURE

En Sık Görülen Pattern Most Common Pattern

Pattern Bazlı Tespit Dağılımı Detections by Pattern

PATH SIGNATURE

44359

404 FLOOD

4797

RATE FLOOD

2526

UA SIGNATURE

1749

AUTH FLOOD

452

MALFORMED REQUEST

RATE LIMIT FLOOD

Son Yakalanan IP'ler Recently Captured IPs

IPIP PatternPattern ÜlkeCountry TekrarHits Son GörülmeLast Seen

176.65.132.23 PATH SIGNATURE The Netherlands x454 07.11 19:05

160.119.66.206 PATH SIGNATURE The Netherlands x401 07.11 18:52

80.87.206.130 PATH SIGNATURE France x3 07.11 18:23

85.11.167.160 PATH SIGNATURE The Netherlands x2 07.11 18:12

40.124.116.90 UA SIGNATURE United States x3 07.11 16:28

172.233.135.159 PATH SIGNATURE United States x1 07.11 16:09

13.86.117.18 UA SIGNATURE United States x1 07.11 15:58

45.148.10.5 RATE FLOOD The Netherlands x31 07.11 15:54

187.17.224.223 PATH SIGNATURE Brazil x45 07.11 15:33

34.76.27.30 RATE FLOOD Belgium x3 07.11 14:59

Nasıl Çalışır? How Does It Work?

⬇️

Kur Install

Sunucuna tek komutla kur. SiberKapan API anahtarını gir, agent otomatik olarak systemd servisi olarak başlar. Install on your server with a single command. Enter your SiberKapan API key, and the agent starts automatically as a systemd service.

🔍

İzle ve Tespit Et Watch and Detect

nginx access log'unu canlı izler. 404/auth/rate flood, exploit path imzaları ve scanner UA'larını anlık tespit eder. Monitors your nginx access log in real time. Instantly detects 404/auth/rate floods, exploit path signatures, and scanner UAs.

🛡️

Topluluğu Koru Protect Community

Eşik aşılınca SiberKapan'a otomatik bildirim. Saldırgan IP tüm toplulukla ve AbuseIPDB ile paylaşılır. Automatic report to SiberKapan once a threshold is crossed. Attacker IP is shared with the community and AbuseIPDB.

Saldırgan          Nginx               Nginx Watcher        SiberKapan
    │                   │                    │                    │
    │── GET /wp-login.php ▶│                    │                    │
    │                   │── access.log ──────▶│                    │
    │◀──────────── 404 Not Found ─────────────│                    │
    │                                         │ Pattern eşleşti:   │
    │                                         │ path_signature     │
    │                                         │── POST /feed/ ────▶│
    │                                         │   nginx             │
    │                                         │                    │── DB'ye ekle
    │                                         │                    │── AbuseIPDB'ye raporla
                                                                   Tüm topluluk korunur

Tespit Edilen Pattern'ler Detected Patterns

404

404 Flood

Dizin/endpoint taramaDirectory/endpoint scanning

401/403

Auth Flood

Brute-force giriş denemesiBrute-force login attempts

RATE

Rate Flood

Bot/scanner istek hızıBot/scanner request rate

PATH

Path Signature

Bilinen exploit imzalarıKnown exploit signatures

UA Signature

sqlmap, nikto, nmap vb.sqlmap, nikto, nmap, etc.

Başlamak İçin API Anahtarı Gerekiyor An API Key Is Required to Get Started

SiberKapan'a ücretsiz kayıt olun, API anahtarınızı alın ve kuruluma başlayın. Register for free on SiberKapan, get your API key, and start the installation.

API Anahtarı Al Get API Key Kaynak Kodu Gör View Source

Log'larından Saldırıyı Yakala,Toplulukla Paylaş Catch Attacks From Your Logs,Share With the Community