From 2e4252500dd11b3bc42de306d2a09f891f4860e7 Mon Sep 17 00:00:00 2001 From: Emile Date: Thu, 14 Feb 2019 15:45:09 +0100 Subject: added a basic analyzer and a readme --- README.md | 42 +++++++++++++++++++++++++++++++++++++++++- 1 file changed, 41 insertions(+), 1 deletion(-) (limited to 'README.md') diff --git a/README.md b/README.md index b711e7b..3799a68 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,43 @@ # honeypot-log-analyzer -Analyzer the docker honeypot logs \ No newline at end of file +Analyzer the docker honeypot logs + +## usage: + +1. Setup a honeypoy +2. grab some logs (`docker-compose logs > .txt`) +3. run the analyzer (`python3 analyzer.py .txt`) + +``` +> $ python3 analyze.py +Amount of hits processed: [...] +----------------- +Most tried usernames: + +[...] + +----------------- +Most tried passwords: + +[...] + +----------------- +Most frequent ips: + +[...] + +----------------- +Most frequent ports: + +[...] + +``` + +Four images get saved: + +| filename | content | +| -------- | ------- | +| username.png | histogram of the most used usernames | +| passwords.png | histogram of the most used passwords | +| ip.png | histogram of to most used ips | +| port.png | histogram of the most used ports | -- cgit 1.4.1