Articles
How Scratchy Can Identify and Report Irregularities in SSL Certificate LogsSSL certificate problems often appear first as small inconsistencies in web server records. A certificate may be close to expiration, assigned to the wrong…
Creating A Kodos Extension For Markdown Regex DocumentationRegular expressions are often treated as disposable code: write a pattern, test it, and move on. That approach becomes expensive when expressions are reused…
Moving Legacy DenyHosts Records Into a Modern DatabaseDenyHosts was designed for a simpler era of Linux administration. Its original workflow recorded hostile SSH activity in flat files, making it easy to inspect…
Using Scratchy to Detect Distributed Scanning Attacks Across Multiple SubnetsA single hostile IP address is easy to notice in an Apache access log. A distributed scan is harder: dozens or hundreds of systems may probe the same…
Refactoring DenyHosts From Script To Modular PythonDenyHosts began with a focused purpose: monitor failed SSH authentication attempts and prevent repeated abuse. That narrow mission made a single Python script…
How I Added a Feature to Kodos to Highlight Regex Backtracking HotspotsKodos began as a practical Python regular expression debugger: a place to write a pattern, test it against sample text, and inspect whether the result matched…
Choosing concurrency for DenyHosts log processingDenyHosts protects SSH services by examining authentication logs, identifying repeated attack sources, and updating host-based deny lists. That workflow…
How I Designed Kodos for Linux Clipboard WorkflowsKodos began with a practical goal: make regular expression development feel immediate. Instead of switching between an editor, a shell, test data, and…
How Scratchy Categorizes Bot Traffic vs Human Traffic in Apache LogsApache access logs record every request in a compact, machine-readable format. That raw stream can reveal popular pages, broken links, hostile probes, crawler…
How I Tested DenyHosts Against Custom Brute Force Simulation ScriptsDenyHosts is designed to watch SSH authentication activity, identify repeated failures, and maintain a list of hosts that should be blocked. I wanted to…