UniFi Insights Plus by JM

What it does:

• Threat Badges in Flow View - Every flow in your UniFi controller's traffic view gets an inline threat score badge. See at a glance which connections involve known malicious IPs, port scanners, or brute-force sources.
• Side Panel Enrichment - Click any flow row and the detail panel shows enriched data: AbuseIPDB threat score, rDNS hostname, ASN/ISP name, abuse categories, and blacklist status.
• Embedded Dashboard Tab - A "Log Insight" tab appears in your UniFi controller's navigation, embedding your full Log Insight dashboard (log stream, threat map, analytics) without leaving the controller.
• Click-to-Investigate - Click "View Traffic" on any enriched IP to jump directly to filtered log results in your Log Insight instance.
• Dark/Light Mode - Automatically matches your UniFi controller's theme.

Requirements:

This extension requires a running UniFi Log Insight server on your network. UniFi Log Insight is a free, self-hosted Docker container that captures syslog from your UniFi gateway and enriches it with GeoIP, threat intelligence, and device names.

Get started: https://insightsplus.dev

Privacy:

This extension collects no data. All communication stays between your browser, your UniFi controller, and your self-hosted Log Insight server. No analytics, no telemetry, no third-party services.

Open Source:

Source code: https://github.com/jmasarweh/unifi-log-insight