Server Analytics · Security monitoring
A Python and Django security monitoring platform: Nginx log analysis, detection rules, UFW blocking, geolocation and Telegram notifications. Modular dashboard, statistics and open-source code.
Project Description
I developed a security monitoring platform for web servers with a Python and Django backend and a modular interface. Its log analyser applies configurable patterns, HTTP methods, request thresholds and time windows to identify scanning, brute-force attempts and excessive requests.
The response workflow records events and integrates UFW blocking, local DB-IP geolocation and Telegram notifications, depending on deployment configuration. The interface provides country statistics, block records and rule monitoring. Dashboard widgets can be arranged through drag and drop, with the layout stored in the browser.
The repository includes a read-only JSON API, CSV export, a PWA, automated tests and installation tools for Nginx, Supervisor and SSL. The project is published under the MIT licence and has an accessible web instance. Screenshots show the actual interface, framed to exclude IP addresses.
Date reference: 2 April 2026 is the first version documented in the public repository, not a confirmed development start date.
Main Features
- Periodic Nginx log analysis and configurable detection rules
- Pattern, HTTP method, threshold and time-window filtering
- UFW blocking and Telegram notifications
- Local DB-IP geolocation
- Modular dashboard with persistent widget layout
- Country statistics, filters and CSV export
- Read-only JSON API and PWA
- Automated tests and documented deployment
- Open-source code under the MIT licence