A quick script for doing some basic analysis on interesting data coming in from connections to a honeypot.
Initially set up to capture connections to Robert Graham's TelnetLogger project that he created to look at Mirai connections, but it can be used to look at IPs.
Because it's made to work with TelnetLogger, it's looking for two files:
- ips.txt
- passwds.txt
It uses those as inputs to sort
, uniq
, etc.
The output will be a sorted list of IPs and Credentials, currently showing the top 25 results.