Console Sign-in
Already have an account? Sign in. First-time users: register the administrator account.
Instance health
Top attack source countries
Instances
Accept pending instances to start managing them; click a name for details.
Enrollment Keys
One-time keys enroll a single machine; you can also mint batch keys valid 24h / 7 days that enroll many machines.
New key
Run the command below on the target machine to enroll (keep this page open to watch the instance appear):
Key history
| Key | Created | Type | Status |
|---|---|---|---|
| Loading… | |||
GeoIP Database (URL auto-sync)
Manual upload is gone: just provide a direct .mmdb URL and the server pulls it on a schedule and distributes it to your instances. Pick the admin-managed global database or a fully separate custom database.
Account data source
Global database (admin-managed, shared)
ASN database (admin-managed, platform-wide)
My custom database (only my instances)
Country access policy
Ban or allow by the event source country: the account default applies to all your instances; each instance can be overridden. allow non-empty = ONLY these countries permitted; deny hit = instant ban. Whitelist (local/private/never_ban) always wins.
Account default policy (all instances inherit)
Failure Rules & IP Allowlist (account-level, all instances)
Instance policy (override)
| Instance | Source | Effective policy | Actions |
|---|---|---|---|
| Loading… | |||
Alerting
Built-in triggers: instance offline, shared feed pull failure, escalated subnet bans. Delivery: email to org owners/admins and/or a JSON webhook.
Alert channels
Recent alerts
| Kind | Time | Detail | Delivery |
|---|
Threat feeds
Platform-wide shared threat feeds are maintained by the admin and shared by every account; you can also maintain your own private blocklist, which is merged with the shared feeds on delivery.
Shared threat feeds (admin-managed, shared by all accounts)
My private blocklist (inline, effective on save)
One IP or CIDR per line (e.g. 203.0.113.0/24 or 1.2.3.4); # comments are supported. Merged with shared feeds on delivery.
Subscribed shared feed status
Subscription & usage
Plans
Billing history
| Plan | Status | When |
|---|
Invite someone to this organization
Existing accounts join immediately; new signups join automatically once they register.
Members
| Member | Role | Status | Joined | Actions |
|---|---|---|---|---|
| Loading… | ||||
API keys (programmatic access)
For scripts and integrations calling instance management / lookup APIs. The full key is shown only once on creation - copy it now.
New key (shown once)
| Name | Key prefix | Scopes | Created | Actions |
|---|---|---|---|---|
| No API keys yet | ||||
External ban webhook (requires a key with the bans:write scope): every POST fans one ban out to all active instances.
curl -X POST https://app.netpulsecloud.com/api/ingest/ban \
-H "Authorization: Bearer <API-KEY>" -H "Content-Type: application/json" \
-d '{"ip":"203.0.113.7","reason":"honeypot","ttl":"24h"}'
User Management
Manage every account: reset passwords, enable/disable, change admin role, delete. The first account ever registered becomes an admin automatically; you cannot act on your own account, and at least one enabled admin always remains.
| Account | Role | Status | GeoIP source | Instances | Registered | Actions |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Top attack sources
Click a prefix to filter its bans belowCurrent bans ({n})
| IP | Reason | Country | Expires | |
|---|---|---|---|---|
| No bans | ||||
Ban history (0)
| IP | Reason | Country | Banned | Closed |
|---|---|---|---|---|
| No ban history | ||||
Per-instance rules (this machine)
Port blocking (public side)
Failure events (last 50)
| Time | IP | User | Service | Country |
|---|---|---|---|---|
| No events | ||||