{"repo":"arn-c0de/seclog-linux","free":true,"listed":false,"github":"https://github.com/arn-c0de/seclog-linux","clone":"git clone https://github.com/arn-c0de/seclog-linux.git","description":"Lightweight SSH login observability for Linux servers. Sends a rich push notification via ntfy on every SSH login and failed attempt, and shows a live security banner at login time.","language":"Shell","stars":24,"topics":["bash","intrusion-detection","linux","logging","monitoring","ntfy","observability","push-notifications","security","self-hosted"],"license":"MIT","category":"analytics","readme_excerpt":"seclog-linux Lightweight SSH login observability for Linux servers. Sends a rich push notification via ntfy on every SSH login and failed attempt, and shows a live security banner at login time. seclog-linux uses a unified push model: successful interactive SSH logins and failed authentication events both end up in the same ntfy topic, so you have one notification stream for SSH visibility instead of separate tooling. What you get On every successful SSH login, the user sees a colored banner: The active connections section shows all established TCP connections, not just SSH — grouped by app and remote target, with direction ( IN / OUT ) and country via a local GeoIP database. Private IP ranges are labelled [LAN] without a lookup. Multiple connections to the same destination are collapsed into one line with a repeat count. And a push to your phone: On every failed login, a separate push fires (rate-limited to one per source-IP per 5 minutes so a brute-force flood won't spam your phone). Components File What it does ------ -------------- bin/ssh-login-notify.sh Sourced from .bashrc on SSH login. Prints the banner and sends the login push. bin/ssh-failed-monitor.sh Long-running daemon. Tails journalctl for failed SSH events and pushes them. bin/seclog CLI command — prints the same banner on demand, without sending a push. bin/seclog-update Pulls the newest commit for your checked-out branch and re-runs the installer. bin/seclog-restart Reloads systemd user units and restarts the","default_branch":null,"files":null,"tree":[],"storefront":"/r/arn-c0de","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/arn-c0de/seclog-linux/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}