I was wondering if it would be possible to have some sort of map of threats and where they are originating from that ips was blocking. Like on my Asus Merlin router I ran skynet and while it didn’t show a map it told me the top ips it was blocking connections from and the ports they were attempting to get to and such. Would be rather neat to see the blocks vs the “get ins” and the origination points. I realize it wouldn’t be precise and such but it would give a more visual representation of what is occuring instead of just notifications. It would be nice if notifications did hostname resolution for the internal side so you could easily glance at what device is talking to the denied thing and such as well. If this has already been requested tell me and I’ll delete this but didn’t see it.
4 Likes