Script to help with server security management. This script returns a list of CIDR blocks relating to Ip's which have made some connection with Apache server over the last 2 days. 99% of this traffic is unwanted (port scans, sqlmap attempts, research scans, etc.) Because only 3, maybe 4 different networks ever have a legitimate reason to have a connection with my server, my solution is to ban anyone else who attempts to connect. I do this by running PSAD (https://github.com/mrash/psad) and passing the output of this script to PSAD's blocking file (auto_dl)
-
Notifications
You must be signed in to change notification settings - Fork 1
Script to help with server security management. Uses Python and a little Linux (cat, whois and grep) to return a list of CIDR blocks relating to ip's which have made a connection with Apache server
BobbyLeonard/Apache-Log-Parser
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Script to help with server security management. Uses Python and a little Linux (cat, whois and grep) to return a list of CIDR blocks relating to ip's which have made a connection with Apache server
Topics
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published