Web Server Log Analyzer (SOC Project)

Description

This project is a basic web server log analyzer built using Python. It parses Apache access logs, extracts client IP addresses, and performs frequency analysis to identify the most active hosts.

Features

• Reads Apache access log files
• Extracts IP addresses using regex
• Counts requests per IP
• Identifies the most active client host

Technologies Used

• Python
• Regex (re module)
• Apache access log format

How to Run

1. Clone the repository
2. Place your log file inside sample_logs/
3. Run: python analyzer.py

Sample Output

Most active IP: 192.168.1.10
Requests: 26

Learning Outcomes

• Log parsing fundamentals
• Regex-based data extraction
• Dictionary-based aggregation
• Basic security log analysis workflow

Future Improvements

• Detect suspicious IP patterns
• Add timestamp analysis
• Visualize traffic trends
• Integrate alerting logic