Mini SOC Platform — Custom Security Monitoring System

Live Production System

Mini SOC Platform — Custom Security Monitoring System

A fully custom Security Operations Center (SOC) built from the ground up and deployed on a live production environment. Ingests real Apache access logs from abadawod.dev, runs them through a custom Detection Engine that identifies known attack patterns (SQL Injection, XSS, sensitive path traversal), enriches suspicious IPs via AbuseIPDB API, and delivers instant Telegram alerts on high-severity events — all automated via Cron Jobs with no dependency on any commercial SIEM tool. Backed by a structured MySQL database of 5 purpose-built tables covering log ingestion, threat classification, IP reputation, detection rules, and automation state.

PHP MySQL AbuseIPDB API Telegram Bot API Cron Jobs cPanel Hosting Custom Detection Engine Threat Intelligence
10,255
Requests Analyzed
1,667
Unique IPs Tracked
0
Threats Undetected
24/7
Auto Monitoring
🧱
System Components
📥
Log Ingestion Engine
Continuously parses real Apache access logs from abadawod.dev and stores raw entries in MySQL for analysis pipeline.
🛡️
Detection Engine
Custom rule-based engine that scans every request for SQL Injection, XSS, and sensitive path access patterns in real time.
🌐
IP Reputation Check
Integrates with AbuseIPDB API to automatically score and classify suspicious IPs — flagging high-risk sources instantly.
🔔
Telegram Alerting
Instant push alerts via Telegram Bot when high-severity threats are detected — zero manual monitoring required.
📊
Live Dashboard
Real-time web dashboard showing traffic charts, top IPs, threat events, and system health metrics at a glance.
📋
Automated Reporting
Weekly auto-generated summaries of all detected threats, traffic patterns, and IP reputation scores via Cron Jobs.
📸
Live Platform Screenshots
Mini SOC Platform — Full Dashboard
Full Dashboard — Live ViewComplete SOC overview: stats, traffic chart, active IPs, and threat monitor in one screen
SOC Real-Time Stats
Real-Time Stats Panel10,255 requests analyzed • 1,667 unique IPs • Live threat counter
SOC Traffic Analysis
24h Traffic AnalysisTop active IPs bar chart + request volume timeline showing real traffic spikes
SOC Threat Events Monitor
Threat Events MonitorContinuously scanning all requests against detection rules • All clear = system working correctly
🧠
Skills Demonstrated
SOC Platform Development Custom Detection Engine Threat Intelligence Integration Log Ingestion & Analysis Automated Alerting (Telegram) Attack Pattern Detection SQL Injection Detection XSS Detection PHP Backend Development MySQL Schema Design Cron Job Automation cPanel Deployment AbuseIPDB API Security Monitoring