{"repo":"nextcloud/suspicious_login","free":true,"listed":false,"github":"https://github.com/nextcloud/suspicious_login","clone":"git clone https://github.com/nextcloud/suspicious_login.git","description":"Detect and warn about suspicious IPs logging into Nextcloud","language":"PHP","stars":105,"topics":["nextcloud-app","security","intrusion-detection","machine-learning","deep-learning","privacy"],"license":"AGPL-3.0","category":"machine-learning","readme_excerpt":"🔮 Nextcloud Suspicious Login Detection Detect and warn about suspicious IPs logging into Nextcloud The app is still under development, so it’s time for you to get involved! 👩‍💻 Installation Nextcloud 25 and newer The app is shipped and comes with the installation of Nextcloud Server. No additional steps are necessary. Nextcloud 24 and older Old versions of this app remain available through the app store. They can be installed through Nextcloud's app management UI. [!NOTE] Newer versions of the app are not included in the app store since it is now a shipped app. Releases and CHANGELOGs As a shipped app: - changes are posted within the Nextcloud Server changelog. - releases are not posted in this GitHub repository, but they are tagged for code perusal. - it is automatically kept up-to-date with each Nextcloud Server release. How it works Data collection Once this app is enabled, it will automatically start tracking (IP, uid) tuples from successful logins on the instance and feed them into the login address table. This insert operation is executed for the majority of requests (client authenticate on almost all requests) and therefore has to be fast. In a background job, these rows will be transformed into an aggregated format that is suitable for the training of the neural net. The (IP, uid) tuple becomes (IP, uid, first seen, last seen, seen) so that we know which (IP, uid) tuple has been seen first and last. The aggregated data is a compressed format of the raw data. The or","default_branch":null,"files":null,"tree":[],"storefront":"/r/nextcloud","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/nextcloud/suspicious_login/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}