| 항목 | 값 |
|---|---|
| filename | access.log |
| total | 4 |
| suspicious_count | 3 |
| top_ips |
['10.0.0.5', 3] ['192.168.1.1', 1] |
| top_status |
['200', 1] ['404', 1] ['401', 1] ['500', 1] |
| suspicious |
line=2 raw=10.0.0.5 - - [01/Jun/2026:12:01:00 +0000] "GET /../etc/passwd HTTP/1.1" 404 512 fmt=apache flags=['error-status', 'suspicious'] ip=10.0.0.5 timestamp=01/Jun/2026:12:01:00 +0000 request=GET /../etc/passwd HTTP/1.1 status=404 size=512 line=3 raw=10.0.0.5 - - [01/Jun/2026:12:02:00 +0000] "POST /login HTTP/1.1" 401 256 fmt=apache flags=['error-status'] ip=10.0.0.5 timestamp=01/Jun/2026:12:02:00 +0000 request=POST /login HTTP/1.1 status=401 size=256 line=4 raw=10.0.0.5 - - [01/Jun/2026:12:03:00 +0000] "GET /shell?cmd=id HTTP/1.1" 500 0 fmt=apache flags=['error-status'] ip=10.0.0.5 timestamp=01/Jun/2026:12:03:00 +0000 request=GET /shell?cmd=id HTTP/1.1 status=500 size=0 |