Nginx Watcher

Log'larından Saldırıyı Yakala,
Toplulukla Paylaş Catch Attacks From Your Logs,
Share With the Community

Nginx Watcher, SiberKapan platformuyla entegre çalışan açık kaynak bir log izleme agent'ıdır. Tek komutla kur — nginx access log'unu canlı izler, 404/auth flood, exploit path imzaları ve scanner User-Agent'larını tespit eder, saldırgan IP'leri otomatik olarak SiberKapan'a bildirir. Nginx Watcher is an open-source log monitoring agent that integrates with the SiberKapan platform. Install with one command — it monitors your nginx access log in real time, detects 404/auth floods, exploit path signatures, and scanner User-Agents, and automatically reports attacker IPs to SiberKapan.

Kurulum — tek komut Installation — single command

$ curl -fsSL https://siberkapan.org/nginx-watcher/install.sh | sudo bash -s -- --key=API_ANAHTARINIZ

Canlı Nginx Watcher İstatistikleri Live Nginx Watcher Statistics

46000

Toplam Tespit Edilen Olay Total Detected Events

20919

Unique Saldırgan IP Unique Attacker IPs

Aktif Watcher Agent'ı Active Watcher Agents

PATH SIGNATURE

En Sık Görülen Pattern Most Common Pattern

Pattern Bazlı Tespit Dağılımı Detections by Pattern

PATH SIGNATURE

38892

404 FLOOD

3727

RATE FLOOD

1755

UA SIGNATURE

1220

AUTH FLOOD

368

MALFORMED REQUEST

RATE LIMIT FLOOD

Son Yakalanan IP'ler Recently Captured IPs

IPIP PatternPattern ÜlkeCountry TekrarHits Son GörülmeLast Seen

84.246.213.208 PATH SIGNATURE — x1 08.10 02:04

20.239.176.5 404 FLOOD — x2 08.10 01:58

213.152.161.5 PATH SIGNATURE — x1 08.10 01:56

146.190.251.142 PATH SIGNATURE — x2 08.10 01:53

168.194.164.3 PATH SIGNATURE Brazil x5 08.10 01:52

219.117.219.36 PATH SIGNATURE Japan x3 08.10 01:33

130.195.210.110 PATH SIGNATURE Spain x2 08.10 01:32

20.115.97.186 UA SIGNATURE — x2 08.10 01:32

198.44.133.84 PATH SIGNATURE — x1 08.10 01:26

50.28.103.133 PATH SIGNATURE — x1 08.10 01:22

Nasıl Çalışır? How Does It Work?

⬇️

Kur Install

Sunucuna tek komutla kur. SiberKapan API anahtarını gir, agent otomatik olarak systemd servisi olarak başlar. Install on your server with a single command. Enter your SiberKapan API key, and the agent starts automatically as a systemd service.

🔍

İzle ve Tespit Et Watch and Detect

nginx access log'unu canlı izler. 404/auth/rate flood, exploit path imzaları ve scanner UA'larını anlık tespit eder. Monitors your nginx access log in real time. Instantly detects 404/auth/rate floods, exploit path signatures, and scanner UAs.

🛡️

Topluluğu Koru Protect Community

Eşik aşılınca SiberKapan'a otomatik bildirim. Saldırgan IP tüm toplulukla ve AbuseIPDB ile paylaşılır. Automatic report to SiberKapan once a threshold is crossed. Attacker IP is shared with the community and AbuseIPDB.

Saldırgan          Nginx               Nginx Watcher        SiberKapan
    │                   │                    │                    │
    │── GET /wp-login.php ▶│                    │                    │
    │                   │── access.log ──────▶│                    │
    │◀──────────── 404 Not Found ─────────────│                    │
    │                                         │ Pattern eşleşti:   │
    │                                         │ path_signature     │
    │                                         │── POST /feed/ ────▶│
    │                                         │   nginx             │
    │                                         │                    │── DB'ye ekle
    │                                         │                    │── AbuseIPDB'ye raporla
                                                                   Tüm topluluk korunur

Tespit Edilen Pattern'ler Detected Patterns

404

404 Flood

Dizin/endpoint taramaDirectory/endpoint scanning

401/403

Auth Flood

Brute-force giriş denemesiBrute-force login attempts

RATE

Rate Flood

Bot/scanner istek hızıBot/scanner request rate

PATH

Path Signature

Bilinen exploit imzalarıKnown exploit signatures

UA Signature

sqlmap, nikto, nmap vb.sqlmap, nikto, nmap, etc.

Başlamak İçin API Anahtarı Gerekiyor An API Key Is Required to Get Started

SiberKapan'a ücretsiz kayıt olun, API anahtarınızı alın ve kuruluma başlayın. Register for free on SiberKapan, get your API key, and start the installation.

API Anahtarı Al Get API Key Kaynak Kodu Gör View Source

Log'larından Saldırıyı Yakala,Toplulukla Paylaş Catch Attacks From Your Logs,Share With the Community