This project aims at analysing the patterns in the brute force style attacks carried out against popular network services like SSH,POP3, FTP, Joomla and wordpress. For the purpose of the project honeypots were set up across three locations
- USA
- Japan
- Ireland
openssl SSH, dovecot POP3, pure FTPD , Woordpress and Joomla were customized to log information to elasticsearch database via Logstash. And then those records were analysee in Kibana. The complete ELK stack was used that helped easy analysis and data collection.
Files in the repo:
- Config files for Logstash
- Source Code for the modified network services
- Complete report