Visitor Analytics

This helps you understand traffic patterns, detect suspicious activity, and take action.

1. Visitor Table

Each row contains:

• Last Access → Timestamp of the visit.
• Visitor IP → IP address of the visitor.
• Visit Frequency → Number of visits from that IP.
• Internet Provider → ISP of the visitor.
• IP Risk Score → Risk score (0 = safe, higher = more suspicious).
• Detection → Classified detection type (see section 2).
• Visitor Country → Country of origin.
• Action → Actions you can apply to this visitor (block/allow)

---

2. Detection Types

Visitors are classified into 7 categories:

1. Clean → No suspicious signals.
2. Proxy → Using anonymous proxy.
3. VPN → Browsing through a VPN.
4. Compromised → Known compromised IP.
5. Scraper → Automated scraping detected.
6. Tor → Connected via TOR anonymity network.
7. Hosting → IP belongs to hosting/cloud provider.

---

3. Filters & Search

• Date range (e.g., Today, Last 7 days).
• Country filter.
• Visit Frequency filter.
• IP Score filter.
• Detection type filter.
• Search → by IP, ISP, or keyword.

---

4. Actions

You can apply actions directly from the visitor table:

• Allow (Whitelist) → Always allow this visitor, bypassing other rules.
• Block (Blacklist) → Immediately block this visitor, showing the block page or overlay.
• Redirect → Send the visitor to a custom URL (e.g., “Not available in your region” or a landing page).

These actions can be applied per visitor or in bulk using checkboxes.

---

Best Practices

• Whitelist known partners, staff, or VIP customers.
• Block suspicious IPs with high risk scores or flagged as Proxy/VPN/TOR.
• Redirect when you want to guide traffic away (e.g., region not served → redirect to an informational page instead of a hard block).
• Always review Visit Frequency + Detection type before deciding.

If you have any questions, feel free to contact us via Crisp Chat or email us at [email protected].