ssh-security

A telemetry analysis pipeline that ingests honeypot logs, extracts behavioral features, computes a quantized risk score per event, and visualizes attack frequency and risk levels in Kibana to help SOC teams prioritize alerts.

Lightweight Python daemon that detects SSH brute-force attacks in real time and auto-blocks IPs via UFW/iptables

A real-time Linux log-streaming security tool written in Python that detects SSH brute-force attacks via RegEx and automatically bans offending IPs using iptables.

A modular, dependency-aware Cockpit security console for Ubuntu personal servers.

Ansible role: reputation-tiered fail2ban ban durations. Tor exits and high-risk datacenter addresses get long bans, clean residential ones get short bans. Uses the free keyless ipfastcheck.com API and nftables timeouts.

Dependency-free Python tool for defensive Linux authentication-log triage and SSH risk signals.

AI-driven cybersecurity project integrating Cowrie Honeypot and Machine Learning for attacker behavior analysis and security log classification.

A Python-based SOC log analyzer that detects SSH brute force, password spraying, account compromise, and blacklisted IPs from Linux authentication logs with dynamic risk scoring and JSON reporting.

Security Log Analyzer — Flask Web Dashboard for threat detection and brute force analysis

🏥 Hospital Brute Force Detector - Real-time RDP/SSH attack detection for healthcare servers. Telegram alerts, IP blocking, and automated incident response for Windows/Linux.

Audit SSH keys for security vulnerabilities, passphrase protection, and key age tracking

A Telegram bot for monitoring SSH logins and managing fail2ban

Splunk SIEM lab — real-time SSH brute force detection, SPL queries, and dashboards mapped to MITRE ATT&CK T1110

Brute force attack detection using SSH logs and Fail2Ban with real-world simulation and mitigation.

An intelligent cybersecurity tool for detecting behavioral SSH anomalies on Linux servers via unsupervised ML and native systemd integration

Automated Linux SSH hardening framework enforcing PAM-based MFA and Zero-Trust network access controls. Features idempotent deployment, policy-as-code validation, and continuous compliance auditing via GitHub Actions.

Advanced network penetration testing toolkit with SSH vulnerability assessment, CVE-2018-15473 exploitation, stealth brute force capabilities, and fail2ban evasion techniques. Professional-grade security testing framework for authorized penetration testing engagements.

Python script to detect brute force SSH login attempts from raw logs