| Etap | Przekazywane dane | Status |
|---|---|---|
| Graylog Event Definition | Windows, Portainer, SSH ISPConfig | DANE SĄ |
| Graylog HTTP Notification -> Fail2Ban UI | ip, jail, hostname, failures, logs | OK |
| Fail2Ban UI -> ban_events -> service-export.py | eksport danych do service-map.json | PLIK ISTNIEJE |
| service-export.py -> service-update.php | synchronizacja usług do dashboardu | OK |
| Fail2Ban UI Advanced Actions -> MikroTik | dodanie IP do graylog-ban | AKTYWNE BANY |
| MikroTik scheduler -> timeout progresywny | Stage 1, 2, 3, 4 oraz timeout 2d, 7d, 30d, 90d | WARN |
| MikroTik -> Dashboard | update.php, bans.json, ban-history.json | WARN |
| Unban TOTP -> unban-queue.txt | kolejka odbanowania do MikroTika | OK |
| WHOIS/RDAP worker | ASN, kraj, operator, miasto, cache | OK |
| Komponent | Plik | Wiek | Próg OK | Status | Opis |
|---|---|---|---|---|---|
| MikroTik -> update.php -> bans.json | bans.json | 1 min | 1 min | WARN | Aktywne bany pobierane z MikroTika |
| Historia -> ban-history.json | ban-history.json | 1 min | 10 min | OK | Historia IP, powroty, statusy i poprzednie bany |
| Graylog -> Fail2Ban UI -> service-map.json | service-map.json | 57 s | 5 min | OK | Przekazane dane z Grayloga: usługa, hostname, source i liczniki |
| WHOIS worker -> whois-bulk-status.json | whois-bulk-status.json | 2 min | 15 min | OK | Status workera WHOIS, RDAP, ASN i GEO |
| WHOIS cache -> whois-cache.json | whois-cache.json | 2 min | 1 d | OK | Cache operatorów, ASN i lokalizacji |
| Usługa | Unikalne IP | Zdarzenia |
|---|---|---|
| Windows Server | 345 | 4256 |
| WordPress-kurdak.eu | 1126 | 2469 |
| SSH ISPConfig | 1072 | 1613 |
| ISPConfig-Panel | 1 | 64 |
| Portainer | 1 | 9 |
| Fail2Ban / test | 2 | 2 |
| Hostname/source | Unikalne IP | Zdarzenia |
|---|---|---|
| Nieznany | 2547 | 8413 |
| IP | Stage | Timeout | Typ | Usługa z Grayloga | Komentarz |
|---|---|---|---|---|---|
| 59.125.99.87 | STAGE-3 | 1d12:13:21 | static | Windows Server | Graylog static ban STAGE-3 |
| 104.238.222.26 | STAGE-3 | 2d09:04:21 | static | WordPress-kurdak.eu | Graylog static ban STAGE-3 |
| 220.133.95.63 | STAGE-3 | 2d11:17:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 114.5.84.99 | STAGE-3 | 2d12:16:21 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 102.212.64.41 | STAGE-3 | 2d12:56:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 103.139.126.5 | STAGE-3 | 2d17:43:21 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 82.147.142.205 | STAGE-3 | 2d17:47:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 195.142.175.196 | STAGE-3 | 3d14:17:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 175.45.161.140 | STAGE-3 | 4d12:22:21 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 204.199.57.196 | STAGE-3 | 4d13:20:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 46.164.148.190 | STAGE-3 | 4d13:32:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 172.233.178.94 | STAGE-3 | 4d15:25:21 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 31.145.131.202 | STAGE-3 | 4d15:32:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 189.125.111.177 | STAGE-3 | 4d15:56:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| 201.139.186.238 | STAGE-3 | 4d16:08:51 | static | SSH ISPConfig | Graylog static ban STAGE-3 |
| Czas | IP | Hostname/source | Usługa | Opis/log |
|---|---|---|---|---|
| 2026-10-14 21:13:24 | 121.46.244.23 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 21:05:23 | 50.199.59.142 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 20:45:23 | 181.63.178.31 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 20:33:23 | 176.120.22.53 | Graylog-Windows | Windows Server | Windows brute force detected by Graylog |
| 2026-10-14 19:53:23 | 207.219.156.249 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 19:41:23 | 187.127.190.132 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 19:11:23 | 109.160.32.151 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 18:27:24 | 103.125.177.27 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 17:57:24 | 223.123.89.25 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 17:49:23 | 223.123.85.231 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 16:37:23 | 45.88.138.47 | Graylog-Windows | Windows Server | Windows brute force detected by Graylog |
| 2026-10-14 16:35:24 | 45.88.138.47 | Graylog-Windows | Windows Server | Windows brute force detected by Graylog |
| 2026-10-14 14:55:23 | 143.244.57.84 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 14:55:23 | 193.176.38.169 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 14:49:24 | 101.89.141.184 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 13:31:23 | 77.239.124.36 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 13:29:23 | 138.84.129.147 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 13:27:25 | 103.26.82.174 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 13:15:24 | 216.244.94.254 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 13:05:23 | 77.239.124.152 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 12:57:29 | 35.196.190.221 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 12:51:24 | 162.4.72.129 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 12:51:24 | 14.102.123.142 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 12:31:23 | 162.4.72.131 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 12:19:23 | 109.160.32.137 | ISPC-Debian | SSH ISPConfig | SSH brute force detected by Graylog |
| 2026-10-14 12:15:24 | 117.1.199.160 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 12:05:23 | 117.134.206.146 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 11:53:23 | 106.215.175.160 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 11:41:23 | 122.176.62.126 | WordPress-kurdak.eu | WordPress-kurdak.eu | WordPress kurdak.eu brute force detected by Graylog |
| 2026-10-14 11:15:24 | 185.136.15.36 | Graylog-Windows | Windows Server | Windows brute force detected by Graylog |
| Plik | Rozmiar | Modyfikacja | Wiek | Status |
|---|---|---|---|---|
| bans.json | 69 425 B | 2026-10-15 01:11:23 | 1 min | WARN |
| ban-history.json | 1 567 023 B | 2026-10-15 01:11:23 | 1 min | OK |
| ban-events.jsonl | 690 990 B | 2026-10-14 23:13:24 | 1 h | STARY / OPCJONALNY |
| service-map.json | 936 638 B | 2026-10-15 01:12:02 | 56 s | OK |
| whois-cache.json | 4 813 168 B | 2026-10-15 01:10:04 | 2 min | OK |
| whois-bulk-status.json | 194 B | 2026-10-15 01:10:04 | 2 min | OK |
| unban-queue.txt | 0 B | 2026-10-15 01:11:32 | 1 min | OK |
| totp-auth.json | 900 B | 2026-08-23 22:13:37 | 52 d | OK |
| unban-auth.json | 3 B | 2026-08-23 22:13:37 | 52 d | OK |