<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blog on agres.online</title><link>https://agres.online/blog/</link><description>Recent content in Blog on agres.online</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Sun, 02 Nov 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://agres.online/blog/index.xml" rel="self" type="application/rss+xml"/><item><title>Bruteforce Analysis</title><link>https://agres.online/blog/bruteforce/</link><pubDate>Sun, 02 Nov 2025 00:00:00 +0000</pubDate><guid>https://agres.online/blog/bruteforce/</guid><description>&lt;h1 id="introduction"&gt;
 Introduction &lt;em&gt;#&lt;/em&gt;
&lt;/h1&gt;&lt;br&gt;
&lt;p&gt;Recently I set up this Website as a small side Project in order to learn a little bit of HTML, CSS and the use of static site generators. In order to host this website I used my VPS I own on &lt;a href="https://www.ionos.de/"&gt;IONOS&lt;/a&gt;. As someone who has spent a lot of time in the Cybersecurity world, I gave my best to secure the VPS as well as possible. Login via SSH is enabled only via Private/Public Key Authentification and &lt;a href="https://github.com/fail2ban/fail2ban"&gt;Fail2Ban&lt;/a&gt; is setup to ban anyone who tries to login more than 5 Times. Once this was setup I created a way to &amp;ldquo;pull&amp;rdquo; the logs from nginx and fail2ban onto my private ProxMox server and Process these into Grafana. As I was doing this, I noticed that the fail2ban logfile has over 31.000 rows. Nothing suspicious for a public IP Address, yet a interesting amount of data.&lt;/p&gt;
&lt;p&gt;After getting my hands on these files I decided that I will try to parse and analyse these bruteforce attacks. Furthermore this will be written in go, because I am trying to hone my skills in it and it allows us to write extremely efficient, fast and lightweight code.&lt;/p&gt;</description></item></channel></rss>