cschantz/Linux-Server-Management-Toolkit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add suspicious login monitor to security menu

Browse Source 
Added suspicious login monitor to Security & Monitoring menu as option 17.

LOCATION:
  Main Menu → Security & Monitoring (2) → Suspicious Login Monitor (17)

MENU TEXT:
  🔐 Suspicious Login Monitor - SSH/Panel login analysis

FUNCTION:
  - Analyzes SSH, wtmp, btmp, sudo logs
  - Parses cPanel/Plesk/InterWorx panel logins
  - 95%+ log coverage
  - Integrated with bot-analyzer, IP reputation, threat intelligence
  - Auto-blocks critical threats
  - Triggers rkhunter scans

USAGE:
  bash launcher.sh
  → Select 2 (Security & Monitoring)
  → Select 17 (Suspicious Login Monitor)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
cschantz
2026-02-03 00:23:54 -05:00
parent 2c80b71363
commit 7638b76f9d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
launcher.sh
+2
View File
@@ -120,6 +120,7 @@ show_security_menu() {
echo -e " ${CYAN}2)${NC} 🤖 Quick Scan (1 hour) - Recent activity only" echo -e " ${CYAN}2)${NC} 🤖 Quick Scan (1 hour) - Recent activity only"
echo -e " ${CYAN}3)${NC} 📊 IP Reputation Manager - Query/manage IP database" echo -e " ${CYAN}3)${NC} 📊 IP Reputation Manager - Query/manage IP database"
echo -e " ${CYAN}4)${NC} 🦠 Malware Scanner - ImunifyAV, ClamAV, Maldet" echo -e " ${CYAN}4)${NC} 🦠 Malware Scanner - ImunifyAV, ClamAV, Maldet"
echo -e " ${CYAN}17)${NC} 🔐 Suspicious Login Monitor - SSH/Panel login analysis"
echo "" echo ""
echo -e "${BOLD}Live Monitoring:${NC}" echo -e "${BOLD}Live Monitoring:${NC}"
echo "" echo ""
@@ -173,6 +174,7 @@ handle_security_menu() {
14) run_module "security" "optimize-ct-limit.sh" ;; 14) run_module "security" "optimize-ct-limit.sh" ;;
15) bash "$BASE_DIR/tools/analyze-historical-attacks.sh" ;; 15) bash "$BASE_DIR/tools/analyze-historical-attacks.sh" ;;
16) run_module "security" "bot-blocker.sh" ;; 16) run_module "security" "bot-blocker.sh" ;;
17) run_module "security" "suspicious-login-monitor.sh" ;;
0) return ;; 0) return ;;
*) echo -e "${RED}Invalid option${NC}"; sleep 1 ;; *) echo -e "${RED}Invalid option${NC}"; sleep 1 ;;
esac esac