20 lines
582 B
Bash
20 lines
582 B
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
ERRORFILE='/tmp/flowers_apache2.log'
|
||
|
|
rm -f ${ERRORFILE}
|
||
|
|
touch ${ERRORFILE}
|
||
|
|
|
||
|
|
NOW=$(date +"%s")
|
||
|
|
grep 'Flowers - authorization failed' /var/log/apache2/error.log | while read -r LINE; do
|
||
|
|
RDT="${LINE:1:31}"
|
||
|
|
DT=$(date --date="${RDT}" +"%s")
|
||
|
|
(( SECS = NOW - DT ))
|
||
|
|
# echo "$RDT, $DT, $NOW, $SECS"
|
||
|
|
if [[ ${SECS} -lt 601 ]] ; then
|
||
|
|
echo $LINE >>${ERRORFILE}
|
||
|
|
IP=$(echo ${LINE} | grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b")
|
||
|
|
addEvent.sh "BLOCK,${IP},5,5,Unauthorized authorization attempt in Flowers"
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
cat ${ERRORFILE} | wc -l
|