/ssh-log-exporter

Prometheus exporter that listens on `/var/log/auth.log` events and exposes counters with the the failed login attempts.

Primary LanguageGo

SSH Log Exporter: Observe Attack Attempts with Prometheus

Build Status

WIP: Prometheus exporter that listens on /var/log/auth.log events and exposes counters with the the failed login attempts. Labels (for now): ip and country.

⚠️ This was written on a Friday night, while drinking some Belgian beers. You better don't look too much at the code, and don't use it in production. 😇🍻

ssh-attack-attempts-grafana

Usage

go run sshlogexporter/main.go

Configurations

Nothing to configure at the moment.

Acknowledgements

Uses sirupsen/logrus for logging, hpcloud/tail for countinously reading the file and phuslu/geoip for getting the country of the IPs

Author

Mathias Beke