{"id":18011085,"url":"https://github.com/regit/dom","last_synced_at":"2025-07-11T05:04:02.239Z","repository":{"id":141524041,"uuid":"20515648","full_name":"regit/DOM","owner":"regit","description":"Deny On Monitoring","archived":false,"fork":false,"pushed_at":"2014-11-29T15:07:07.000Z","size":191,"stargazers_count":13,"open_issues_count":0,"forks_count":4,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-04-07T17:11:46.177Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/regit.png","metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-06-05T07:18:49.000Z","updated_at":"2024-12-30T20:19:51.000Z","dependencies_parsed_at":"2023-03-13T10:32:53.757Z","dependency_job_id":null,"html_url":"https://github.com/regit/DOM","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/regit/DOM","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2FDOM","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2FDOM/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2FDOM/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2FDOM/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/regit","download_url":"https://codeload.github.com/regit/DOM/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/regit%2FDOM/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264734572,"owners_count":23655695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-30T02:16:22.917Z","updated_at":"2025-07-11T05:04:02.224Z","avatar_url":"https://github.com/regit.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"==================\nDeny On Monitoring\n==================\n\nIntroduction\n============\n\nDOM is a proof of concept implementing a solution similar to fail2ban. It parses Suricata EVE log file\nsearching for SSH event. If the client version is based on libssh, it adds the host to a blacklist\nby using ipset.\n\nRunning DOM\n===========\n\nGo into the source directory and run: ::\n\n ./dom -f /usr/local/var/log/suricata/eve.json\n\nFull options are available via '-h' option: ::\n\n usage: dom [-h] [-f FILE] [-s IPSET] [-v] [-l LOG] [-m MOTIF] [-i] [-D]\n \n Deny On Monitoring\n \n optional arguments:\n   -h, --help            show this help message and exit\n   -f FILE, --file FILE  JSON file to monitor\n   -s IPSET, --ipset IPSET\n                         Set IPSET for blacklist\n   -v, --verbose         Show verbose output, use multiple times increase\n                         verbosity\n   -l LOG, --log LOG     File to log output to (default to stdout)\n   -m MOTIF, --motif MOTIF\n                         String to look for in event\n   -i, --invert          Invert match: trigger action if not found\n   -D, --daemon          Run as unix daemon\n\nIf you know that regular client are using a software client (like OpenSSH) then\nyou can use ``motif`` and ``invert`` options to trigger an action on all clients not using\nthis software: ::\n\n ./dom -f /usr/local/var/log/suricata/eve.json -i -m OpenSSH\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fregit%2Fdom","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fregit%2Fdom","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fregit%2Fdom/lists"}