first

getFlowerFails

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+ERRORFILE='/tmp/flowers_apache2.log'
+rm -f ${ERRORFILE}
+touch ${ERRORFILE}
+
+NOW=$(date +"%s")
+grep 'Flowers - authorization failed' /var/log/apache2/error.log | while read -r LINE; do
+    RDT="${LINE:1:31}"
+    DT=$(date --date="${RDT}" +"%s")
+    (( SECS = NOW - DT ))
+    # echo "$RDT, $DT, $NOW, $SECS"
+    if [[ ${SECS} -lt 601 ]] ; then
+        echo $LINE >>${ERRORFILE}
+        IP=$(echo ${LINE} | grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b")
+        addEvent.sh "BLOCK,${IP},5,5,Unauthorized authorization attempt in Flowers"
+    fi
+done
+cat ${ERRORFILE} | wc -l