Dashboard
Real-time overview of your PBX security
MONITORING
🌐 MULTI-SERVER PBX FLEET
● FLEET HEALTH: 100% SECURE
TOTAL CALLS
VIEW CALLS →0
↑ Real Inbound & Outbound Calls
WINDOWS ANALYZED
AI METRICS →0
Sliding 60s windows
ATTACKS DETECTED
INVESTIGATE →0
No active attacks
THREAT LEVEL
FIREWALL →LOW
All systems normal
TRAFFIC TIMELINE
ATTACK DISTRIBUTION
🔍 VIEW IN ATTACK ANALYSIS →
0
Total
INVITE_FLOOD
0%SIP_SCANNER
0%REGISTER_BRUTE_FORCE
0%EXTENSION_ENUMERATION
0%OPTIONS_FLOOD
0%TOLL_FRAUD
0%
SYSTEM STATUS
AI ENGINE →
📞 SIP Service
Normal⚛️ Asterisk PBX
Normal🧠 ML Model
Normal🗄️ Backend SQLite (optox_events.db)
Active💾 Frontend SQLite (frontend.db)
Active🛡️ Firewall
Normal
LAST DETECTION
🔍 DETAILS
No threats detected
System is secure
TOP SOURCE IPS
ALL CALLS →
| IP Address | Events | Percentage |
|---|---|---|
| Monitoring source IPs... | ||
RECENT ALERTS & CALL DISCONNECTS
VIEW LIVE STREAM →
| Time | Type | Status | Details |
|---|---|---|---|
| Listening for real-time call events... | |||
View all live events →
🧠 ML MODEL STATUS
ACTIVE
🤖
LightGBM AI Shield
NEURAL ANOMALY DETECTOR
Model Engine
LightGBM Classifier
Engine Version
v1.0.0 (Production)
Model Accuracy
99.90%
Analysis Window
60s Sliding Window
Last Trained
04 Aug 2026 10:30 AM
✔ MODEL ENGINE ACTIVE & UP TO DATE
📜 CALL LOGS & TELEMETRY STREAM (YESTERDAY & TODAY FROM SQLITE DB)
| Date & Time | Caller ID | Extension | Method | Context & Source IP | Call Status / Hangup State | Response |
|---|---|---|---|---|---|---|
| Loading historical call logs from SQLite Database... | ||||||
🚨 LIVE DETECTED SECURITY INCIDENTS & THREAT HISTORY
| Time | Attacking IP | Threat Class | Anomaly Vectors | AI Confidence | Mitigation Status | Action |
|---|---|---|---|---|---|---|
| 🛡️ No active security incidents. System is completely secure. | ||||||
🛡️ Active Threat Analysis & Vector Matrix
| Threat Class | Detection Rule | Trigger Threshold | Mitigation |
|---|---|---|---|
| INVITE_FLOOD | High-density burst of SIP INVITEs | > 15 / 60s | Automated iptables DROP |
| SIP_SCANNER | User-agent probing (SIPCli / Sipvicious) | Pattern Match | Automated iptables DROP |
| REGISTER_BRUTE_FORCE | Failed SIP extension auth attempts | > 3 failed auth / 60s | IP Ban (30 Days) |
| EXTENSION_ENUMERATION | Sequential extension range probing | > 5 extensions / 60s | IP Ban (30 Days) |
| OPTIONS_FLOOD | Continuous OPTIONS keep-alive flood | > 20 / 60s | Rate Throttling |
| TOLL_FRAUD | Abnormal international call duration spikes | Duration > 180s | Channel Hangup |
🟢 Whitelisted IP & Trunk Subnets
| Whitelisted IP / CIDR Subnet | Security Status | Action |
|---|---|---|
| Loading whitelisted subnets... | ||
🚫 BLACKLISTED CALLER IDS & PHONE NUMBERS
AUTOMATED & MANUAL TELECOM REJECTION
| Blacklisted Phone Number / Caller ID | Security Status | Action |
|---|---|---|
| Loading blacklisted phone numbers... | ||
🧠 LightGBM Neural Feature Importance
invite_count_60s
failed_count_60s
register_count_60s
request_rate
unknown_caller_ratio
short_call_ratio
toll_dest_flag
📊 LightGBM Classifier Architecture
Model EngineLightGBM Decision Trees
Sliding Window Size60 Seconds Window
Inference Step Speed< 2ms Prediction Time
Feature Vector Dimension14 Continuous Features
Training Dataset Size250,000 SIP Packets
Validation Accuracy99.90% Precision
Storage PersistenceSQLite DB (optox_events.db)
🔬 Feature Vectors & Anomaly Metrics Breakdown
| Feature Name | Data Type | Weight Signal | Target Vector Threshold |
|---|---|---|---|
invite_count_60s | Integer | HIGH (88%) | > 15 INVITE requests / 60s |
register_count_60s | Integer | MEDIUM (75%) | > 3 failed auth / 60s |
failed_count_60s | Integer | HIGH (82%) | > 3 authentication 401/403 errors |
toll_dest_flag | Boolean | CRITICAL (92%) | International premium prefix (+881 / +882) |
short_call_ratio | Float (0-1) | INFO (58%) | Duration < 5s with unanswered SIP 200 |
📊 48-Hour Call Volume & Threat Metrics
Historical metrics aggregated over 48-hour monitoring windows
Peak Hourly Volume
142 Req / hr
↑ 12.4% normal load
Avg Call Duration
245.5 Sec
Normal PSTN duration
Mitigated Threats
100% Success
0 Dropped legitimate calls
Carriers Monitored
11 Subnets
Plivo & AWS Gateways
📑 Security Compliance & Audit Reports
Generate and export official security audit reports for regulatory compliance:
| Audit Period | Total Events Analyzed | Threats Blocked | System Health | Action |
|---|---|---|---|---|
| Today (Live) | SQLite DB Telemetry Logs | 100% MITIGATED | HEALTHY |
🖥️ Managed Asterisk PBX Backend Servers
🔐 Operator Access & Password Security
Manage the credentials used to log into this Optox Shield SOC Console.
⚙️ Global Protection Settings
DRY RUN MODE (Active Banning)
When OFF, Optox Shield active mode executes iptables & AMI caller ID hangups.
ACTIVE BANNING (DRY_RUN = FALSE)
IP & CALLER ID BAN DURATION
Automatic ban duration for malicious IPs and blacklisted phone numbers.
30 Days (43,200 Minutes)