# 生成 SSL 证书
./generate-ssl.sh

# 使用 docker-compose 启动
docker-compose up -d

# 监控日志
./monitor.py --tail

# 以 root 身份运行以便设置 fail2ban
sudo ./deploy.sh

# x86_64
docker run -d -p 8080:8080 \
  -e HONEYPOT_NAME="log4shell-honeypot" \
  -e LOG_FORMAT="json" \
  -e RATE_LIMIT_REQUESTS="100" \
  --name="log4shell-honeypot" \
  msanford/log4shell-honeypot:latest

# ARM（例如 Raspberry Pi）
docker run -d -p 8080:8080 \
  -e HONEYPOT_NAME="log4shell-honeypot" \
  --name="log4shell-honeypot" \
  msanford/log4shell-honeypot:arm-latest

# 从配置文件加载
docker-compose --env-file config.env up -d

# 格式化输出跟踪日志
./monitor.py --tail

# 分析最近 24 小时
./monitor.py --hours 24

# 分析最近 1 小时
./monitor.py --hours 1

curl http://localhost/health

curl http://localhost/metrics

sudo fail2ban-client status log4shell-honeypot

{
  "timestamp": "2024-01-15T10:30:45Z",
  "honeypot": "log4shell-honeypot",
  "event_type": "log4shell_attempt",
  "source_ip": "192.168.1.100",
  "real_ip": "10.0.0.5",
  "method": "POST",
  "url": "http://honeypot.local/",
  "user_agent": "Mozilla/5.0...",
  "detected_patterns": ["${jndi:", "${env:"],
  "detection_source": "form_field:username",
  "headers": {...},
  "form_data": {...},
  "query_params": {...},
  "content_length": 45
}

# 构建容器
docker build -t log4shell-honeypot:latest .

# 使用特定标签构建
docker build -t log4shell-honeypot:v2.0 .

docker-compose ps
docker-compose logs log4shell-honeypot

curl -f http://localhost/health || echo "健康检查失败"

sudo fail2ban-client status
sudo tail -f /var/log/fail2ban.log

# 检查近期攻击
./monitor.py --hours 1

# 查看原始日志
tail -f /var/log/log4shell-honeypot.log

# 在 docker-compose.yml 中
deploy:
  resources:
    limits:
      cpus: '0.5'
      memory: 256M
    reservations:
      cpus: '0.1'
      memory: 128M