A powerful SSH authentication log analyzer that detects brute-force attacks, suspicious IPs, and failed login attempts. Helps identify potential security threats in your server logs.
- Failed password detection - Identifies all failed authentication attempts
- Invalid user tracking - Detects attempts using non-existent usernames
- IP reputation scoring - Flags suspicious IPs based on attempt frequency
- Risk classification - High (10+ attempts) / Medium (5-9 attempts)
- JSON report generation - Structured output with timestamps
- Top offenders ranking - Shows IPs with most failed attempts
- Unique IP extraction - Complete list of all attacking IPs
- Simple CLI interface - Easy to use with any log file
# Clone the repository
git clone https://github.com/robertojrss/logparser.git
# Navigate to the directory
cd logparser
# No additional dependencies required - uses only Python standard library