Hi There,

I am looking for any solution or a script may be in perl/bash or python which could aggregrate the IP addresses and provide me in file?

Well the idea here is I have deployed network based honeypot which is receiving numerous attacks and thus have different IP addresses. Now one IP addresses is hitting multiple ports and those are being logged into file. However is there way i could aggregrate those and move to other file every 5 mins or as soon as it hits my honeypot the IP address will be logged into other file which should be uniq?

Please let me know of may ideas?

you should post examples, so ppl know how to parse the logs.

EDIT: forgot to say that i ran glastopf on my network. it were ok honeypot.

fail2ban is python and quite good at this.

Please let us know.