Files
kb-anhonesthost/src/content/docs/whp/add-ons/monitoring.mdx

52 lines
2.1 KiB
Plaintext

---
title: Monitoring (AI Monitor)
description: Proactive alerts for site errors, brute-force attempts, and exploit signatures.
sidebar:
order: 2
---
import PaidAddon from '~/content/partials/paid-addon-callout.mdx';
import Support from '~/content/partials/support-link.mdx';
<PaidAddon />
## What it does
AI Monitor watches your site's logs, error rates, and access patterns in the background. If something looks unusual — a sustained spike in 500 errors, a brute-force pattern against a login page, a request matching a known exploit signature — you get an alert.
By default alerts go to the contact email on your account; SMS is available for critical-severity events if you opt in.
## What's included
- **Real-time log scanning** across PHP, Apache, and access logs.
- **Brute-force detection** on auth endpoints (WordPress wp-login.php, generic /login, mail auth, SFTP).
- **Exploit-signature alerts** with severity grading (informational, warning, critical).
- **Per-rule ignore lists** so you can mute things you've already triaged or know are harmless for your site.
- **SMS notifications** for critical-severity alerts (configurable; off by default).
## How to enable
From the [client portal](https://secure.anhonesthost.com/clientarea.php), go to your hosting service → **Upgrade/Downgrade** → pick Monitoring.
## Where it lives in WHP
Once enabled, find it in the sidebar: **Security → AI Monitor**.
![AI Monitor in WHP](~/assets/screenshots/whp/whp-monitor.png)
You'll see a feed of events, severity badges, and counts. Click an event for the full log context.
## Tuning false positives
Some signatures are noisier than others — for example, a security scanner you run yourself will trip every exploit-signature rule. Open the rule from the event detail and click **Ignore** to mute it for your account; the rule stays active for everyone else.
If you find yourself muting a rule frequently, [open a ticket](https://secure.anhonesthost.com/submitticket.php) — we may be able to tune the underlying rule for everyone instead of you suppressing each instance.
## Related
- [Add-ons overview](/whp/add-ons/overview/)
## Still stuck?
<Support />