zwitschi/intrusion-detection
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add WHOIS subnet querying and IP consolidation utility

Browse Source 
- Implemented a new utility for querying WHOIS information and consolidating IP addresses by subnet.
- Added caching mechanism for WHOIS responses to improve performance.
- Introduced functions for loading and saving the WHOIS cache, querying subnets, and consolidating IPs based on a threshold.

feat: create Flask web UI for intrusion detection system

- Developed a Flask web application to manage the intrusion detection system.
- Implemented routes for scanning, reports, blocklist management, and firewall configuration.
- Added helper functions for reading files and handling requests.

feat: define routes for web UI

- Registered routes for various web pages and API endpoints in the Flask application.
- Implemented functionality for scanning, reporting, blocklist management, and firewall state retrieval.

feat: implement background scan runner for web UI

- Created a background scan runner to handle scan jobs in a separate thread.
- Managed an in-memory job store for tracking scan jobs and their statuses.
- Added persistence for scan jobs to maintain state across application restarts.

chore: update start script for Flask application

- Enhanced the PowerShell start script to check for the existence of the virtual environment.
- Added comments and structured the script for better readability and usability.
This commit is contained in:
zwitschi committed 2026-08-08 14:33:51 +02:00
1 parent 41230ce04c
commit 9f8ab0f61c
102 files changed
+1102652 -268
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/reports/copyparty/2026-08-07-19-48-03.txt
+70
View File
@@ -0,0 +1,70 @@
copyparty log analysis report
generated: 2026-08-07T19:48:03
log path: P:\copyparty
log files: 43
total requests: 1227
unique IPs: 14 (IPv4 14 / IPv6 0)
error requests: 279
unique denied paths: 182
denied requests: 279
banned IPs: 3
authenticated users: {}
denied-only ips: 9
whitelisted IPs seen: 0
block candidates: 9
== top 30 IPs ==
ip total denied banned first last users whitelist
------------------------------------------------------------------------------------
34.140.123.172 434 6 411 21:34:17.485 21:35:45.084 *
20.100.172.153 275 137 0 09:10:06.751 09:10:17.835 *
34.9.173.20 245 9 224 16:55:22.164 16:55:30.344 *
172.213.153.79 114 57 0 18:40:13.799 18:40:20.149 *
20.91.239.158 114 57 0 13:42:20.392 13:42:24.986 *
207.175.159.248 25 9 7 03:52:06.643 03:52:07.542 *
35.196.132.85 6 0 0 14:20:00.708 16:50:00.731 *
91.92.241.196 4 2 0 15:50:20.187 15:50:21.628 *
157.245.63.62 2 1 0 13:04:56.122 13:04:56.122 *
35.227.62.178 2 0 0 15:20:01.556 15:20:01.557 *
35.237.169.55 2 0 0 13:53:04.249 13:53:04.250 *
94.154.43.229 2 1 0 12:53:30.198 12:53:30.198 *
34.85.209.183 1 0 0 15:59:40.864 15:59:40.864 *
94.154.43.178 1 0 0 16:14:12.910 16:14:12.910 *
== top 20 denied paths ==
5 /admin.php
3 /wp-content/plugins/hellopress/wp_filemanager.php
3 /this_is_a_new_hello_world.php
3 /av.php
3 /media.php
3 /images.php
3 /222.php
3 /mac.php
3 /ops.php
3 /8.php
3 /biufile.php
3 /coffexium.php
3 /1.php
3 /classwithtostring.php
3 /wp-ws68.php
3 /mgrr.php
3 /yj09.php
3 /3PJcpMFsD8B.php
3 /BDKR28WP.php
3 /shiny.php
== Denied-only IPs (9) ==
never authenticated -- ban candidates
-- IPv4 (9) --
ip total denied banned first last users whitelist
------------------------------------------------------------------------------------
20.100.172.153 275 137 0 09:10:06.751 09:10:17.835 *
172.213.153.79 114 57 0 18:40:13.799 18:40:20.149 *
20.91.239.158 114 57 0 13:42:20.392 13:42:24.986 *
207.175.159.248 25 9 7 03:52:06.643 03:52:07.542 *
34.9.173.20 245 9 224 16:55:22.164 16:55:30.344 *
34.140.123.172 434 6 411 21:34:17.485 21:35:45.084 *
91.92.241.196 4 2 0 15:50:20.187 15:50:21.628 *
157.245.63.62 2 1 0 13:04:56.122 13:04:56.122 *
94.154.43.229 2 1 0 12:53:30.198 12:53:30.198 *