Max SimonPython auth.log monitor
Python script that parsed auth.log to show who tried to log into a server, from where and as which user.
Parsed SSH authentication attempts with regular expressions: targeted accounts and source IPs. Discontinued — the idea continues in my BTS monitoring project.