This script analyses your auth.log for failed attempts that hackers try to log into your SSH Server.
The script is set to run with pi as the user. You have to manually change the user varible and the location of your log file location if you have it in a different location.
USER=pi
LOG=/var/log/auth.log
This will create 1 file
- IP_information.txt - Contains the GeoIP information for their respected IPs
This script needs sudo privileges. So run with sudo.
sudo ./GeoIpLocator.sh