menu_activity.php — Wordfence Security – Firewall, Malware Scan, and Login Security 3.2.5

wordfence / lib / menu_activity.php

wordfence / lib Last commit date

menu_activity.php

202 lines

1	<div class="wordfenceModeElem" id="wordfenceMode_activity"></div>
2	<div class="wrap wordfence">
3	<div class="wordfence-lock-icon wordfence-icon32"><br /></div><h2 id="wfHeading">Live Site Activity</h2>
4	<div class="wordfenceLive">
5	<table border="0" cellpadding="0" cellspacing="0">
6	<tr><td><h2>Wordfence Live Activity:</h2></td><td id="wfLiveStatus"></td></tr>
7	</table>
8	</div>
9	<div class="wordfenceWrap">
10	<div>
11	<div id="wfTabs">
12	<a href="#" class="wfTab1 wfTabSwitch selected" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_hit', function(){ WFAD.activityTabChanged(); }); return false;">All Hits</a>
13	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_human', function(){ WFAD.activityTabChanged(); }); return false;">Humans</a>
14	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_ruser', function(){ WFAD.activityTabChanged(); }); return false;">Registered Users</a>
15	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_crawler', function(){ WFAD.activityTabChanged(); }); return false;">Crawlers</a>
16	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_gCrawler', function(){ WFAD.activityTabChanged(); }); return false;">Google Crawlers</a>
17	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_404', function(){ WFAD.activityTabChanged(); }); return false;">Pages Not Found</a>
18	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_loginLogout', function(){ WFAD.activityTabChanged(); }); return false;">Logins and Logouts</a>
19	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_topLeechers', function(){ WFAD.staticTabChanged(); }); return false;">Top Consumers</a>
20	<a href="#" class="wfTab1 wfTabSwitch" onclick="wordfenceAdmin.switchTab(this, 'wfTab1', 'wfDataPanel', 'wfActivity_topScanners', function(){ WFAD.staticTabChanged(); }); return false;">Top 404s</a>
21	</div>
22	<div class="wfTabsContainer">
23	<div id="wfActivity_hit" class="wfDataPanel"><div class="wfLoadingWhite32"></div></div>
24	<div id="wfActivity_human" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
25	<div id="wfActivity_ruser" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
26	<div id="wfActivity_crawler" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
27	<div id="wfActivity_gCrawler" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
28	<div id="wfActivity_404" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
29	<div id="wfActivity_loginLogout" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
30	<div id="wfActivity_topScanners" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
31	<div id="wfActivity_topLeechers" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
32	<div id="wfActivity_blockedIPs" class="wfDataPanel" style="display: none;"><div class="wfLoadingWhite32"></div></div>
33	</div>
34	</div>
35	</div>
36	</div>
37
38	<script type="text/x-jquery-template" id="wfLeechersTmpl">
39	<div>
40	<div style="border-bottom: 1px solid #CCC; padding-bottom: 10px; margin-bottom: 10px;">
41	<table border="0" style="width: 100%">
42	{{each(idx, elem) results}}
43	<tr><td>
44	<div>
45	{{if loc}}
46	<img src="http://www.wordfence.com/images/flags/${loc.countryCode.toLowerCase()}.png" width="16" height="11" alt="${loc.countryName}" title="${loc.countryName}" class="wfFlag" />
47	<a href="http://maps.google.com/maps?q=${loc.lat},${loc.lon}&z=6" target="_blank">{{if loc.city}}${loc.city}, {{/if}}${loc.countryName}</a>
48	{{else}}
49	An unknown location at IP <a href="${WFAD.makeIPTrafLink(IP)}" target="_blank">${IP}</a>
50	{{/if}}
51	</div>
52	<div>
53	<strong>IP:</strong> <a href="${WFAD.makeIPTrafLink(IP)}" target="_blank">${IP}</a>
54	{{if elem.blocked}}
55	[<a href="#" onclick="WFAD.unblockIP('${IP}'); return false;">unblock</a>]
56	{{else}}
57	[<a href="#" onclick="WFAD.blockIP('${IP}', 'Manual block by administrator'); return false;">block</a>]
58	{{/if}}
59	</div>
60	<div>
61	<span class="wfReverseLookup"><span style="display:none;">${elem.IP}</span></span>
62	</div>
63	<div>
64	<span class="wfTimeAgo">Last hit was ${elem.timeAgo} ago.</span>
65	</div>
66	</td>
67	<td style="font-size: 28px; color: #999;">
68	${elem.totalHits} hits
69	</td>
70	</tr>
71	{{/each}}
72	</table>
73	</div>
74	</div>
75	</script>
76	<script type="text/x-jquery-template" id="wfLoginLogoutEventTmpl">
77	<div style="display: none;">
78	<div class="wfActEvent" id="wfActEvent_${id}">
79	<div>
80	{{if loc}}
81	<img src="http://www.wordfence.com/images/flags/${loc.countryCode.toLowerCase()}.png" width="16" height="11" alt="${loc.countryName}" title="${loc.countryName}" class="wfFlag" />
82	<a href="http://maps.google.com/maps?q=${loc.lat},${loc.lon}&z=6" target="_blank">{{if loc.city}}${loc.city}, {{/if}}${loc.countryName}</a>
83	{{else}}
84	An unknown location at IP ${IP}
85	{{/if}}
86	{{if action == 'loginOK'}}
87	logged in successfully as <strong>"${username}"</strong>
88	{{else action == 'logout'}}
89	logged out as <strong>"${username}"</strong>
90	{{else action == 'loginFailValidUsername'}}
91	attempted a failed login as <strong>"${username}"</strong>.
92	{{else action == 'loginFailInvalidUsername'}}
93	attempted a failed login using an invalid username <strong>"${username}"</strong>.
94	{{/if}}
95	</div>
96	<div>
97	<strong>IP:</strong> <a href="${WFAD.makeIPTrafLink(IP)}" target="_blank">${IP}</a>
98	{{if blocked}}
99	[<a href="#" onclick="WFAD.unblockIP('${IP}'); return false;">unblock</a>]
100	{{else}}
101	[<a href="#" onclick="WFAD.blockIP('${IP}', 'Manual block by administrator'); return false;">block</a>]
102	{{/if}}
103	</div>
104	<div>
105	<span class="wfReverseLookup"><span style="display:none;">${IP}</span></span>
106	</div>
107	<div>
108	<span class="wfTimeAgo">${timeAgo} ago</span>
109	</div>
110	</div>
111	</div>
112	</script>
113	<script type="text/x-jquery-template" id="wfHitsEventTmpl">
114	<div style="display: none;">
115	<div class="wfActEvent" id="wfActEvent_${id}">
116	<table border="0" cellpadding="1" cellspacing="0">
117	<tr>
118	<td>
119	{{if user}}
120	<span class="wfAvatar">{{html user.avatar}}</span>
121	<a href="${user.editLink}" target="_blank">${user.display_name}</a>
122	{{/if}}
123	{{if loc}}
124	{{if user}}in {{/if}}
125	<img src="http://www.wordfence.com/images/flags/${loc.countryCode.toLowerCase()}.png" width="16" height="11" alt="${loc.countryName}" title="${loc.countryName}" class="wfFlag" />
126	<a href="http://maps.google.com/maps?q=${loc.lat},${loc.lon}&z=6" target="_blank">{{if loc.city}}${loc.city}, {{/if}}${loc.countryName}</a>
127	{{else}}
128	An unknown location at IP <a href="${WFAD.makeIPTrafLink(IP)}" target="_blank">${IP}</a>
129	{{/if}}
130	{{if referer}}
131	{{if extReferer}}
132	arrived from <a href="${referer}" target="_blank" style="color: #A00; font-weight: bold;">${referer}</a> and
133	{{else}}
134	left <a href="${referer}" target="_blank" style="color: #999; font-weight: normal;">${referer}</a> and
135	{{/if}}
136	{{/if}}
137	{{if activityMode == 'hit'}}
138	landed on
139	{{else activityMode == 'human' \|\| activityMode == 'ruser'}}
140	visited
141	{{else activityMode == '404'}}
142	tried to access
143	{{else activityMode == 'gCrawler'}}
144	crawled
145	{{else activityMode == 'crawler'}}
146	crawled
147	{{/if}}
148	<a href="${URL}" target="_blank">${URL}</a>
149	</td></tr>
150	<tr><td><span class="wfTimeAgo">${timeAgo} ago</span>   <strong>IP:</strong> <a href="${WFAD.makeIPTrafLink(IP)}" target="_blank">${IP}</a>
151	{{if blocked}}
152	[<a href="#" onclick="WFAD.unblockIP('${IP}'); return false;">unblock</a>]
153	{{else}}
154	[<a href="#" onclick="WFAD.blockIP('${IP}', 'Manual block by administrator'); return false;">block</a>]
155	{{/if}}
156	<span class="wfReverseLookup"><span style="display:none;">${IP}</span></span>
157	</td></tr>
158	{{if browser && browser.browser != 'Default Browser'}}<tr><td><strong>Browser:</strong> ${browser.browser}{{if browser.version}} version ${browser.version}{{/if}}{{if browser.platform && browser.platform != 'unknown'}} running on ${browser.platform}{{/if}}</td></tr>{{/if}}
159	<tr><td style="color: #AAA;">${UA}</td></tr>
160	<tr><td></td></tr>
161	</table>
162	</div>
163	</div>
164	</script>
165	<script type="text/x-jquery-template" id="wfWelcomeContent3">
166	<div>
167	<h3>Welcome to ALL Your Site Visits, Live!</h3>
168	<strong><p>Traffic you've never seen before</p></strong>
169	<p>
170	Google Analytics and other Javascript analytics packages can't show you crawlers, RSS feed readers, hack attempts and other non-human traffic that hits your site.
171	Wordfence runs on your server and shows you, in real-time, all the traffic that is hitting your server right now, including those non-human crawlers, feed readers and hackers that Analytics can't track.
172	</p>
173	<strong><p>Separated into the important categories</p></strong>
174	<p>
175	You'll notice we have divided your traffic into tabs. These include an "All Hits" tab to simply view everything that is hitting your server right now.
176	We then sub-divide that into Human traffic, your site members, crawlers - which we further break down into Google crawlers.
177	</p>
178	<p>
179	<strong>How to use this page when your site is being attacked</strong>
180	</p>
181	<p>
182	Start by looking at "All Hits" because you may notice that a single IP address is generating most of your traffic.
183	This could be a denial of service attack, someone stealing your content or a hacker probing for weaknesses.
184	If you see a suspicious pattern, simply block that IP address.
185	</p>
186	<p>
187	If you don't see any clear patterns of attack, take a look at "Top 404s" which will show you IP addresses that are generating excessive page not found errors.
188	It's common for an attacker probing for weaknesses to generate a lot of page not found errors. If you see one IP
189	address that is generating many of these requests, and it's not Google or another trusted crawler, then you should consider
190	blocking them.
191	</p>
192	<p>
193	Next look at "Logins and Logouts". If you see a large number of failed logins from an IP address, block them if you don't recognize who they are.
194	</p>
195	<p>
196	Finally, take a look at "Top Consumers". These are the top IP addresses who are "consuming" or accessing most of your content.
197	If you're trying to protect yourself against a content thief, this is the first place to look.
198	</p>
199
200	</div>
201	</script>
202