e816e81820
Setup: - lissy93/web-check running in Docker on port 3000 - Queries ports, DNS, and blocklist endpoints per IP Enrichment now includes 4 layers: 1. Geolocation (ip-api.com) — country, ISP, proxy/hosting flags 2. Web-Check deep scan — open ports, DNS/PTR, blocklist status 3. Security log aggregation — all activity for that IP 4. AI analysis (qwen2.5) — gets ALL above data as context Frontend rendering: - Open ports displayed in red (security risk indicators) - Blocklist status: "3/8 blocked (AdGuard, AdGuard Family, ...)" - Reverse DNS (PTR records) - All data feeds into AI analysis prompt for richer verdicts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>