https://github.com/devv712/ssh-log-analysis-for-brute-force-attack-detection-
SSH Log Analysis for Brute-Force Attack Detection
https://github.com/devv712/ssh-log-analysis-for-brute-force-attack-detection-
Last synced: 7 months ago
JSON representation
SSH Log Analysis for Brute-Force Attack Detection
- Host: GitHub
- URL: https://github.com/devv712/ssh-log-analysis-for-brute-force-attack-detection-
- Owner: devv712
- Created: 2025-04-16T18:23:10.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-04-20T20:36:01.000Z (12 months ago)
- Last Synced: 2025-06-16T15:43:58.196Z (10 months ago)
- Language: HTML
- Size: 2.17 MB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# SSH Log Analyzer
A Python-based tool for analyzing SSH authentication logs to detect and report potential brute-force attacks.
## Features
- Parses `/var/log/auth.log` files for failed SSH login attempts
- Detects patterns indicating potential brute-force attacks
- Generates comprehensive HTML reports with attack statistics
- Visualizes attack patterns (source IPs, timestamps, frequency)
- Filters and searches for specific attack vectors
- Command-line interface for analysis operations
## Requirements
- Python 3.6+
- pandas for data manipulation
- matplotlib/seaborn for visualization
- (Installation via pip: `pip install pandas matplotlib seaborn`)
## Usage
Basic usage:
```bash
python ssh_log_analyzer.py