Active Connections

Monitor active network connections in real time with per-IP grouping.

Overview

Displays real-time connections from ss -ntu state connected. Connections are grouped by IP with port breakdowns.

How to Use

1. Navigate to DDoS > Active Connections.
2. Review the connection table. Connection count badges are color-coded: blue (normal), yellow (>20 elevated), red (>50 high).
3. Click Block on any suspicious IP to block it immediately.
4. Use the search filter to find specific IPs.
5. Pause auto-refresh to investigate specific entries.