What it doesLogHunter is a database-driven security log analysis tool built to automatically detect suspicious login activity before it turns into a full breach. Inspired by recent high-profile incidents — including credential-based intrusions tied to Apple's supply chain — it was designed to catch the patterns that most breaches hide behind: repeated failed logins, impossible-travel logins, and rapid-fire login attempts. Built with Python and MySQL, LogHunter automatically flags brute-force attacks (3+ failed logins from one IP), correlates failed logins with firewall blocks, detects logins from multiple countries in implausible timeframes, and calculates timing gaps between login attempts — all while logging real-time alerts through a database trigger. It turns hours of manual log review into seconds of automated analysis, giving security teams a single, reliable source of truth for authentication risk.
Log Hunter is currently in the development stage, with the core log analysis, login-attempt tracking, firewall correlation, and threat-reporting functionality being developed and tested.
Log in or sign up for Devpost to join the conversation.