🅸🅿🆃🅾🆄🆇 Profile picture
Mar 21, 2023 17 tweets 7 min read Read on X
P1/2 #Asiis (Advanced ssh intruder identification system)

Today, i leave some preview images of the python version here. It's full off new features.

- Threading
- Logging (file, terminal,telegram)
- Whois via socket tcp connection (port 43)
- All build-in modules!
- Statusline ImageImageImage
P2/2

- Automatic whois server selection, based on ip country -> fallback via iana.org if no valid whois (validly check)
- Config what you want to see on statusline (Threads, Queue, Active intruder, Attack count, New IP since start)
- Known intruder detection.
The multi threading is really working... Image
And.... it's done, the first steps. Image
Added new log level to lib so only specific logs (alerts) will be send to telegram. Image
Update:

Added possibility to use Extensions/Plugins! 🙂 Image
Do an example extension for later, so ppl. can learn how to create itself. Image
Adding possibility to do a backup of logs, db, whois file. Errors/Warnings will also be handled via application. Example shows warning, when some files for backup are not available. Image
I know... ppl. love it when it is automatic! Image
The first fully working extension for Asiis is running. It's to demonstrate how to write your own extensions.

KeyPoints:
- Automatic blocking of ip after x attempts
- Unblocking after x minutes (set an scheduler)
- Integration to app and access to application objects (SQL,… twitter.com/i/web/status/1… ImageImage
ToDo for pre-release (no graphical panel)
- Add an option to unblock ip's manually (once/all)
- Fix some bugs (that i know)
- Review already created DockerFile.

Todo:
- Documentation/Wiki
- Cmd query option, to get stats about ip's
- Documentation/Wiki
- Cmd's for Telegram bot
-… twitter.com/i/web/status/1…
Choose a config type you want. The environment config file/Vars will work with docker later. Image
Explain:

You only set the name of the config file. The wrapper function then determine the file extension and select the right config loader, so you don't have to set any type of config.
Reworked extensions, they now have an on_load, on_hook, on_execute functions, they now be loaded into app first (here you can load intensive data into app) and call on_execute in the Worker, where the data is used.

Removed App objects (reworked some code). First include of map
Map is now included (using #folium module). Different layers, popups and tooltips included. More informations and data will be included later.

I still search for a cool nice fancy name for my app, actually it is called [Asiis] - Advanced ssh intruder identification system.

Be… twitter.com/i/web/status/1…
Pic 1: Load and exit of Application.
Pic 2: You are now able to add Information from extensions to the Statusline (B = Banned IP's) ImageImage

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with 🅸🅿🆃🅾🆄🆇

🅸🅿🆃🅾🆄🆇 Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(