Upload your web server access log. We'll crawl your site, classify every request in your log using our AI blueprint engine, and email you a detailed threat report — completely free, no account needed.
Takes less than 5 minutes · Standalone HTML report emailed to you
Real threat report for a New Zealand website — 80.7% of all traffic was attacks. Your report will show your actual data.
The whole thing runs automatically. You just submit your domain and upload your log.
Submit your website's domain name and email address. We start crawling your site immediately to build a blueprint of what legitimate traffic looks like.
Once we've crawled your site we'll email you a secure upload link. Drop in your web server access log — nginx, Apache, or a cPanel download. Supports .log, .gz, .zip, and .tar.gz archives.
We classify every request in your log against your site's blueprint using the same AI engine that powers Moat AIS protection. Your personalised HTML report is emailed to you — ready to open in any browser.
Total requests, attack count, percentage of traffic that was malicious, and an overall risk rating from Low to Critical.
Every IP that sent malicious traffic, ranked by volume, with their top probe paths and the attack types they used.
Legitimate visitors vs bots vs scanners vs attack traffic — visualised as a donut chart and detailed table.
SQL injection, path scanning, credential stuffing, vulnerability probing — each category ranked by volume with real example URLs from your log.
Attack requests per hour so you can see when your site is most targeted and at what sustained rate attacks are arriving.
Every attack that reached your server — and confirmation that Moat AIS would have blocked it automatically before it got there.
Your web server keeps a detailed record of every request. Here's where to find it.
/var/log/nginx/access.log
/var/log/nginx/access.log.1
Rotated files are numbered. Pass them all for a fuller picture. Files ending in .gz are automatically decompressed.
/var/log/apache2/access.log
/var/log/httpd/access_log
Location varies by distribution. Check /etc/apache2/
or /etc/httpd/ for your config.
cPanel → Metrics → Raw Access
Download the last 7–30 days. cPanel zips logs automatically — just upload the .zip and we'll handle the rest.
Got a .tar.gz or .zip full of logs? No problem — just upload the archive. We'll extract all the log files inside and analyse them together for a complete picture.
Enter your domain and email. We'll crawl your site, analyse your logs, and send you a personalised security report — no account, no credit card.
Get my free threat reportAlready protected? Sign in to your dashboard →