totekuh / bruteforce-sleuth Goto Github PK

@mtalimanchuk please investigate, why the actual log file cannot be parsed on 1bddbaf revision number

So, now we have a possibility to collect information about attackers geolocation. I think, we can collect more data about IP addresses list with Shodan support. They have a public API, so i dont think that this can be a problem. What do you think?

There's a problem with receiving '&' character literally (and probably others) in lookup response. Probably encoding. Could you investigate, @derstolz? I marked it in the comment in def geo_lookup()

currently sleuth is capable only with ssh bruteforcing. it can be a good idea to add custom regex or a group of regex's to choose for a specific log format

Do we actually need some? We can force our amazon instance to rebuild the map or do whatever we want every time, when someone merging pull request into master-branch.