Source code to download and analyze our audit log. This is a set of scripts to download the log for the wordpress audit log plugin.
First put SITE_USER SITE_PASSWORD and SITE_URL in secret.py. Then run the scripts in the following order, each will create a new file in data to view and the next step uses that file as input.
- download_auditlog.py
- clean_auditlog.py
- failed_login_check_auditlog.py
- getbadhosts.py
This will result in a baddies_per_host.yaml which gives list of hosts with belonging ips that tried to bruteforce logins.