zwitschi
41230ce04c
feat: update blocklist with newly detected IPs
2026-08-06 14:58:55 +02:00
zwitschi
80a67635de
feat: write timestamped blocklist change reports on firewall sync
2026-08-06 14:31:15 +02:00
zwitschi
48c5629b4b
feat: update blocklist with newly detected IPs
2026-08-06 14:14:05 +02:00
zwitschi
894a2eec33
feat: make MikroTik blocklist cumulative via git history
2026-08-06 13:21:02 +02:00
zwitschi
c131759a7c
feat: update blocklist with newly detected IPs
2026-08-06 11:45:47 +02:00
zwitschi
94f62ae591
feat: add IPv4 address space graph with interactive tooltip
2026-08-06 11:45:24 +02:00
zwitschi
51f57f7a04
feat: add incremental log scanning with resumable byte offsets
...
Track last processed byte offset per log file so scans only read new
entries, add --full flag to force a rescan, and persist state atomically.
2026-08-05 21:41:00 +02:00
zwitschi
f5abaaf7e5
fix: minimize spacing on blocklist display page
2026-08-05 20:52:35 +02:00
zwitschi
0a28865518
fix: allow el() to omit attributes when first child is a node or array
2026-08-05 20:44:22 +02:00
zwitschi
4ef6892916
feat: add localhost web UI for scans, blocklist, and firewall management
2026-08-05 20:34:34 +02:00
zwitschi
a9dc560f80
feat: update mikrotik address lists with new blocked IPs
2026-08-05 19:48:09 +02:00
zwitschi
28c77691bb
feat: write consolidated blocklists and mirror git-diffable router state
...
- Add `write_blocklist_files()` to emit final IPv4/IPv6 blocklists to `reports/app/data/`
- Add `APP_REPORT_DIR` / `APP_REPORT_DATA_DIR` constants for consolidated outputs
- Write firewall state snapshots to `data/mikrotik/` for git diff auditing
- Capture router state before scanning; fall back to scan-only if router is unreachable
- Use `split_cidr_versions` for CIDR-aware subnet splitting
- Update README with output layout and git-diffable state notes
2026-08-05 19:44:09 +02:00
zwitschi
6005340ecb
docs: adding blocklists
2026-08-05 19:43:59 +02:00
zwitschi
c5024e3cd1
docs: adding mikrotik data
...
updating README.md for data folder
2026-08-05 19:43:39 +02:00
zwitschi
23907179c9
chore: update whois cache
2026-08-05 19:39:37 +02:00
zwitschi
eea5ef6885
Add centralized constants module and .env configuration support
2026-08-05 19:33:12 +02:00
zwitschi
94be1da199
chore: update whois cache
2026-08-05 19:31:45 +02:00
zwitschi
f78faf8f8a
Restructure sources into app package with unified entry point and update documentation
2026-08-04 22:23:59 +02:00
zwitschi
540154d426
Refactor imports in firewall.py and scan.py to use ip_utils; remove utils module
2026-08-04 22:10:22 +02:00
zwitschi
40212d84f7
Refactor copyparty and npm analyzers to use updated imports and remove utils module
...
Update whois cache with additional IP ranges
2026-08-04 21:56:55 +02:00
zwitschi
0e2c69579a
Remove MikroTik block list script and enhance scan.py for firewall synchronization
...
- Deleted the existing MikroTik block list script (mikrotik-block.rsc) which contained whitelisted and blocked IP addresses.
- Updated scan.py to include options for synchronizing the MikroTik blocked list after scanning.
- Added functionality to preview firewall changes without applying them.
- Integrated the MikrotikFirewall class to manage the synchronization of blocked IPs with the MikroTik device.
2026-08-04 18:38:08 +02:00
zwitschi
0f51c40e44
add blocklist 2026-08-03
2026-08-04 09:05:27 +02:00
zwitschi
bbf07dec5a
Refactor monolith utils into domain modules and update docs
2026-08-03 17:01:36 +02:00
zwitschi
970e1b5eed
adjust paths for reports data
2026-08-03 16:39:47 +02:00
zwitschi
42d786b0a2
Move WHOIS cache to data directory and update .gitignore to ignore report directories
2026-08-03 16:39:11 +02:00
zwitschi
15019de3d8
Initial commit: intrusion detection system for copyparty and NPM proxy logs with MikroTik blocklist export
2026-08-03 16:34:45 +02:00
zwitschi