check_ssh_risk_logins
Analyze SSH login risks by monitoring failed attempts and suspicious IPs using specified thresholds and log files for enhanced server security.
Instructions
检查SSH登录风险，包括失败尝试和可疑IP
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| log_file | No | /var/log/auth.log | |
| password | No | ||
| port | No | ||
| threshold | No | ||
| timeout | No | ||
| username | Yes |
Input Schema (JSON Schema)
{
"properties": {
"hostname": {
"title": "Hostname",
"type": "string"
},
"log_file": {
"default": "/var/log/auth.log",
"title": "Log File",
"type": "string"
},
"password": {
"default": "",
"title": "Password",
"type": "string"
},
"port": {
"default": 22,
"title": "Port",
"type": "integer"
},
"threshold": {
"default": 5,
"title": "Threshold",
"type": "integer"
},
"timeout": {
"default": 30,
"title": "Timeout",
"type": "integer"
},
"username": {
"title": "Username",
"type": "string"
}
},
"required": [
"hostname",
"username"
],
"title": "check_ssh_risk_loginsArguments",
"type": "object"
}