Logs

Field Definitions for Beelzebub Logs

Here is the structured JSON definition of each field in Beelzebub logs:

  • Command: The command entered by the attacker.

  • CommandOutput: The honeypot's response.

  • DateTime: The date and time of the attack.

  • Description: A description of the honeypot configuration.

  • ID: The unique identifier for each attack.

  • Location: Details regarding the attack's origin.

  • Msg: Information regarding the state callback.

  • Protocol: The protocol used by the honeypot (SSH, HTTP, or TCP).

  • RemoteAddr: The attacker's IP address and local post (IP:Port).

  • Status: The interaction stage (Start, Stop, or Interaction). In an SSH session, the status is Interaction.

Last updated