OSINT Panel: who is trying to access the server
Running since October 2026 · 2,306 blocked attempts this month
Every connected server receives login attempts every day. The usual outcome is that you don’t even notice: the firewall blocks them and that’s it. The issue is that you also don’t knowwhoI try it.from wherenor if any of them are serious.
This panel brings together in one place what used to require checking five different sources: the Fail2ban blocks, website visits, the country of each address, the filter status, and the public record of any IP. And with that, it determines from which countries connections to the server are allowed.
What it does, exactly
- It shows daily blocks, including the jail, the IP address, and its country.
- It draws where visits and attacks come from, by country and by continent.
- Gives the record/profile of any address: country, range, whether it’s blocked, and what attempts have been made here.
- The filter lets you choose by country and block individual addresses, with a note and a lock.
- A custom assistant answers questions with real data, and shows what it has looked up.
How it is built
Self-hosted application onNext.jswithPostgreSQLwithin a container; the filter operates on the firewallnetwork packet filtering frameworkof the server andBan failurecuts SSH brute-force attempts. The country data comes from official internet records (710,834 ranges from 251 countries). Everything is processed throughTraefikwith password protection, two-factor authentication, and restricted access.
What can be seen from outside, and what cannot
The website only shows one record/profile at a timephoto addedEvery fifteen minutes: whether it responds, whether the filter is active, and how many attempts have been blocked.NeverThe IP addresses, allowed countries, ports, or anything inside the control panel: that stays inside, where it belongs.