Dashboard

Welcome back! Here's your VPN overview

Admin

Active Servers

Network Tweaks

Total Users

1.0

Config Version

Banned Users

Open Tickets

Quick Actions

Recent Activity

Coin Economy

Ad Revenue via AdMob

Active Users

User Geography

Loading map...

30-Day Server Uptime

Compact daily status grid with latency details on hover.

Traffic Trend

Reusable time-series contract for mobile traffic analytics.

App Versions

Ranked view of client versions reported during sync.

User Management

Monitor and manage your VPN users

Backend API: checking...

Filter Users

Min Coins

Max Coins

Status

Suspicious Activity Auto-Ban

Hard Coin Limit

Warn Coin Limit

Rapid Jump Coins

Jump Window (mins)

Auto-ban on refresh

No scan yet.

All Users 0

0 selected

	Device ID	Coins Balance	Last Active	Status	Actions
Loading users...

Coin Colors: ðŸ”´ 1000+ ðŸŸ¢ 100-999 ðŸ”µ 50-99 ðŸ”µ 10-49 ðŸŸ¡ <10 âšª Banned | ðŸ’¡ Click "Coins Balance" to sort

Support Tickets

Track threaded user issues, manage priorities, and reply from one workspace

Status

Priority

Waiting Admin: 0 Waiting User: 0 Resolved: 0 Closed: 0 Filtered: 0

Ticket	Subject	Latest	Device	Priority	Status	Actions
No tickets loaded yet

Ticket Workspace

Open a ticket to review the full conversation, adjust workflow state, and reply to the user.

Select a ticket from the table above to inspect the thread.

Subject

Conversation

Replies sent here are visible in the app ticket view.

Sending a reply moves the ticket to Waiting User.

Redeem Codes

Generate redeem codes and manage coin compensation

Redeem Code Generator

Coins

Expires In (hours)

Generated Code Format: encrypted <expiryMillis@coins> (compatible with current app redeem flow).

Coin Compensation

New Users (Auto)

Enable or disable onboarding bonus for new installs.

Enable New User Bonus

Bonus Coins (new users) Loads current policy when opening this page.

Existing Users (Run Once)

Apply a one-time compensation only to users already in the database. Compensation Coins Target Group

Exclude banned users

Reason (optional)

Run preview to see affected users before applying.

Broadcast

Send push notification to all users (FCM topic)

Title

Data (optional JSON)

Message

Broadcast History

Servers

Add, edit and manage server list

Server Endpoint Registry

Manage every SSH/SSL/Proxy endpoint used by the app. Keep host, port, and credentials clean before publishing.

Reorder with S/N arrows Validate credentials Publish after refresh

Quick Checklist

Confirm host resolves and ports are reachable.
Keep country flag and server name aligned.
Use refresh after bulk edits before publish.

Search Servers

S/N	Status	Name	Flag	SSH Host	SSH	SSL	Proxy	Latency	Actions
No servers yet

Tweaks

Manage tweak payloads & configs

Tweak Library

Maintain payloads, DNS/SNI, and proxy routes by tweak type. Keep naming consistent so operators can identify behavior quickly.

Group by tweak type Keep payload readable Refresh before publish

Operational Tips

Prefer explicit names over generic labels.
Validate SNI/Proxy host formatting before save.
Use S/N reorder controls to keep priority clear.

Search Tweaks

S/N	Name	Flag	Type	SNI / Host	Proxy	Actions
No tweaks yet

Import Config

Paste JSON / encrypted config and load into panel

Paste config

Only needed if your config gen uses a different key

Ad Settings

Edit AdsSettings + TimerSettings

BannerAd

IntertitialAd

RewardedAd

AppOpenAd

FreezeTimer

Publish v1.0

Preview/export/publish config

Config Version (required â€” must be higher than current for app to update) Update Message (shown to users when update is available)

JSON Preview

{}

Scheduled Publish

Set a future date and time to automatically publish the current config.

Config Validator

Check all server SSH, SSL, and Proxy ports are reachable before publishing.

Coin OTA Updates

Create coin rewards for specific device IDs and publish as encrypted payload for the app endpoint.

Reward Name

Coins

Device IDs (one per line)

Encrypted Payload Preview Published data is encrypted with OTA key and consumed by action=app_coin_updates.

Each reward remains valid for 24 hours in app flow (based on Date field).

Settings

Configure API, app policy, and Firebase (stored locally in browser)

API Update Security Storage Defaults

Security Note: Admin credentials are only stored in the backend PHP file (api/v2/index.php). Login credentials are never stored in the browser.

API Configuration

API Endpoint Full URL to your backend API If opened via file://, default fallback is https://iptunnel.internetshub.com/api/v2/index.php unless overridden here. Timeout (ms) Request timeout in milliseconds

Storage Backend

SQL migration is one-time. After switching to SQL, you only run migration again if you restore old JSON backups.

Storage status not loaded yet.

Backend: -

Driver: -

DSN: -

Mirror: -

Error: -

App Update Policy

Enable forced update

Minimum App Version Code Set 0 to disable minimum version check Minimum App Version Name Play Store URL

Require App Session (Play Integrity)

Turn ON only after all app users are on updated builds that send X-App-Session.

App Security Toggles

Require Signed Imports

If ON, import signing key must be configured and all .ipt/cloud imports should be signed.

Strict Security Mode

Blocks legacy (v1) auth — only session_v2 clients accepted. Also forces signed imports ON. Play Integrity (App Session) is independently controlled. Strict mode is ON: legacy auth blocked, signed imports forced. Use Require App Session separately to control Play Integrity enforcement.

Allow App Coin Sync

Emergency switch for app_coin_sync writes.

Coin Sync Rate Window (seconds)

Coin Sync Max / Window (per device)

Max Increase Per Sync

Max Decrease Per Sync

Protects against abnormal coin jumps from modified clients.

Allow Legacy Redeem Codes

Max Legacy Redeem Coins Caps old-style redeem codes (that are not generated in server pool).

Enable Debug Logging (Server)

Keep OFF in production. If enabled, logs are still masked and .log files are blocked via .htaccess. Auth Bypass Device IDs These devices skip strict mode, signatures, and session checks entirely. For debug/test builds only — keep empty in production.

Default Server Credentials

Default Username Default Password These values are returned to app clients via signed app policy and used only when per-server fields are empty.

Admin Credentials

To change admin login:

Edit api/v2/index.php
Line 60: Change ADMIN_USER
Generate new password hash: php -r "echo password_hash('NEWPASS', PASSWORD_DEFAULT);"
Line 61: Paste new hash into ADMIN_PASS_HASH

Firebase Configuration (Firestore)

Firebase is required for user management and push notifications. Get your config from Firebase Console â†’ Project Settings.

apiKey

authDomain

projectId

storageBucket

messagingSenderId

appId

Settings are stored in browser LocalStorage. Clearing browser data will remove them.

Activity Log

Full coin transaction and event history

Filter by action

Search device ID

â€” entries

Time	Action	Device ID	Before	After	Delta	Source
Loading...

Config History

Version snapshots and diff viewer

Loading history...

IP Tunnel