Admin panel
- Live dashboard at /admin/ (password-protected, nginx-fronted): sessions with connected operators, traffic, TTL
- Session history: ended sessions with who shared, who attached as operator and when
- IP management: per-IP stats (connections, sessions, handshake failures, ID enumeration), block for 1h / 24h / 7d / 30d / forever
- Persistent bans: all blocks are stored in a JSON file and survive restarts
- Enumeration guard: 10 failed session lookups in 10 min from one IP → auto-block (24h → 7d → permanent on repeat)
- Full event log: sessions, operators, transfers, bans, rejected connections
- Login brute-force protection: 5 wrong passwords → 1h IP ban
Server flags: -admin 127.0.0.1:8022 -admin-password-file <path> -admin-prefix /admin -ban-file <path>
🤖 Generated with Claude Code