Loghound 1.3: SEO Tools, Your Own Attack Patterns and a Chart Above Every Table
Loghound, the free and open-source traffic analyser that runs on your own server and keeps what it learns in your own Opensolr indexes, has grown a second job. Besides telling you which half of your traffic is not a person, it now tells you how the human half changed, and it lets you say what counts as an attack on your own sites.
01 SEO Tools: this period against another
A new section in the navigation, right below Visitors, where every number is shown for two periods side by side. Pick today so far, yesterday, the last 7, 28 or 90 days, this month or last month, or any two calendar ranges back to the first day your index holds. A period that is still running is compared like for like: today until now against yesterday until the same time, never against the whole of yesterday.
- Nine pages, one question each: a scorecard, channels, search engines and AI assistants, landing pages, referring sites, countries and devices, engagement by channel, crawlers, and the pages crawlers fetch against the visits those pages actually receive.
- Ranked by change: biggest gains, biggest losses, most visits now, new and gone, on every table.
- A chart on every page, this period drawn beside the comparison period, and a CSV behind every table that records both periods in its header.
- It follows your filters, so humans only is the Verdict filter, set once.
02 Attack patterns you define
A settings page for requests that are an attack on your sites, on top of the built-in detector: plain text or a regular expression, for every host or for one. A match is flagged on the Attacks page with the pattern that fired, and the visit is scored a bot. It ships with 48 defaults that are an attack on any website, such as webshell names, deployment secrets and botnet droppers, and a default you switch off stays off after an update.
03 Sharper verdicts
A client with an empty User-Agent, or one naming a library instead of a browser, could land as unknown. A request refused by your own firewall added nothing to the verdict.
Anything that is neither a real browser nor a declared crawler is scored a bot. A refused request that matched an attack pattern convicts, and any other 403 adds points without convicting on its own.
The ruleset now has twenty-five weighted rules, every one of them listed with its weight and what it tests in the scoring documentation.
04 Smaller things you will notice
- CSV import and export for exclusions, attack patterns and live-stream exclusions, so a second installation starts with the rules the first one earned.
- A chart above every ranked table across the panel, drawn from the same rows as the table so the two always agree.
- Compact controls on a phone, and charts that follow their card's width.
Already running Loghound? Upgrading covers what to run after the pull.