This guide explains reports for Monarx Website Threat Shield on hosting accounts and Monarx Server ThreatShield on servers. These reports appear under ThreatShield in the Monarx dashboard.
ThreatShield reports show web-request security activity recorded for your hosting account or server.
Open the security dashboard, select ThreatShield, and choose the reporting period.
Blocked versus Logged
| Action | Meaning |
|---|---|
| Blocked | ThreatShield recorded that the request was blocked |
| Logged | The request was recorded; this action alone does not mean it was blocked |
A blocked request does not by itself mean your website is infected. It can represent an attempted request that a security rule stopped.
Rules may relate to hardening, virtual patching, bots, or other security checks. Open the event details to see the request and rule information.
Reading the report
- Check the selected period.
- Review the activity chart and totals.
- Find the event in the log.
- Open its details to inspect the URL, action, rule, source IP, and other available context.
The current protection setting and configured mode are separate pieces of information. A mode label can remain visible even when protection is switched off. Read the protection state as well.
An empty log means no events were returned for that period and account. It does not prove that no attacks are possible or that protection is enabled.
Contact Support if events you expect are missing, protection is unavailable, or a legitimate request appears affected.
Related guides
- How to read Monarx security event details
- Why are my Monarx security reports empty, missing, or unavailable?
- Managing Monarx protection settings and getting help
Need help?
Contact Support and identify the service and feature you need help with.
