Beelzebub
  • Beelzebub framework docs
  • Getting Started
    • Quickstart
    • SSH LLM Honeypot
  • Basics
    • Kubernetes deployment
    • Beelzebub API v1
    • Logs
    • Beelzebub Labs
Powered by GitBook
On this page
  1. Basics

Logs

Field Definitions for Beelzebub Logs

Here is the structured JSON definition of each field in Beelzebub logs:

  • Command: The command entered by the attacker.

  • CommandOutput: The honeypot's response.

  • DateTime: The date and time of the attack.

  • Description: A description of the honeypot configuration.

  • ID: The unique identifier for each attack.

  • Location: Details regarding the attack's origin.

  • Msg: Information regarding the state callback.

  • Protocol: The protocol used by the honeypot (SSH, HTTP, or TCP).

  • RemoteAddr: The attacker's IP address and local post (IP:Port).

  • Status: The interaction stage (Start, Stop, or Interaction). In an SSH session, the status is Interaction.

PreviousBeelzebub API v1

Last updated 2 months ago