Results for “auth.log”

编写Python2脚本，以块数据方式高效读取大型auth.log文件，统计最近5分钟内“connecting closed”出现次数超过10次的IP，并提示登录爆破行为。

The English summary is being prepared. Showing the original description.

编写Python2脚本，以块数据方式高效读取大型auth.log文件，统计最近5分钟内“connecting closed”出现次数超过10次的IP，并提示登录爆破行为。

The English summary is being prepared. Showing the original description.

Analyze security logs through four agent roles that parse events, detect anomalies, classify risk, and write an incident report. Use nginx, authentication, or system logs to review suspicious activity and receive a risk summary with recommended actions.

• Investigate suspicious access in nginx logs
• Analyze anomalies in authentication logs
• Classify risks found in security logs