denbeke/ssh-log-exporter repository overview

⁠SSH Log Exporter: Observe Attack Attempts with Prometheus

WIP: Prometheus exporter that listens on /var/log/auth.log events and exposes counters with the the failed login attempts. Labels (for now): ip and country.

⚠️ This was written on a Friday night, while drinking some Belgian beers. You better don't look too much at the code, and don't use it in production. 😇🍻

⁠Usage

go run sshlogexporter/main.go

⁠Configurations

Nothing to configure at the moment.

⁠Acknowledgements

Uses sirupsen/logrus⁠ for logging, hpcloud/tail⁠ for countinously reading the file and phuslu/geoip⁠ for getting the country of the IPs

⁠Author

Mathias Beke⁠