jonbirge / logpager

Visual web interface for linux security log analysis, forensics and threat blacklisting
https://nyc.birgefuller.com/logpager/
MIT License
2 stars 0 forks source link

Move all blacklist functionality into its own project #254

Closed jonbirge closed 4 weeks ago

jonbirge commented 2 months ago

Will provide API for adding IPs and CIDRs to threat database, as well as API for downloading dynamically created blacklists with various filter criteria. Eventually logpager should just use this, rather than a local database. Open question: should the blacklisting service handle its own geolocation and reverse DNS of IPs, or should that data be part of what is provided by clients?