<?php

// Threats (honeypot dashboard): probe feed, KPIs, banned IPs (R16).
return [
    // Header
    'eyebrow' => 'Security',
    'title' => 'Threats',
    'subtitle' => 'Honeypot activity and banned IP addresses',
    'probes_pill' => ':count probes (24h)',

    // KPI tiles
    'kpi_login_attempts' => 'Login attempts (24h)',
    'kpi_probes' => 'Probes (24h)',
    'kpi_banned' => 'Banned IPs',
    'kpi_honeytoken' => 'Honeytokens',
    'kpi_top_ip' => 'Top attacker',

    // Threat feed
    'feed_title' => 'Honeypot events',
    'feed_subtitle' => 'newest first',
    'tried_creds' => 'Attempted credentials',
    'search_label' => 'Search threats',
    'search_placeholder' => 'IP address, target …',
    'pagination_nav' => 'Threat pages',
    'pagination_prev' => 'Previous',
    'pagination_next' => 'Next',
    'empty_title' => 'No threats',
    'empty_feed' => 'No threats recorded.',
    'empty_filtered' => 'No threats found for “:query”.',

    // Banned IPs
    'banned_title' => 'Banned IPs',
    'banned_subtitle' => 'active blocks',
    'banned_until' => 'blocked until :time',
    'reason_unknown' => 'unknown',
    'unban' => 'Unblock',
    'unbanned_toast' => ':ip unblocked.',
    'empty_banned_title' => 'No blocks',
    'empty_banned' => 'No IP addresses are currently blocked.',
];