sshd-bruteforce-detector/message_parse.py
2026-03-23 11:19:04 -03:00

16 lines
497 B
Python

from datetime import datetime
import re
class Message:
def __init__(self, message: str, date: datetime):
self.date = date
self.user = re.search(r"user=([^\s]+)", message)
self.rhost = re.search(r"rhost=([^\s]+)", message)
self.user = self.user.group(1) if self.user else None
self.rhost = self.rhost.group(1) if self.rhost else None
@staticmethod
def is_failed_auth_message(message: str):
return "authentication failure;" in message