linux/ddos-mitigator
1
0
Fork 0
Code Issues Pull requests Releases 5 Wiki Activity

Add a script to scrape all IP addresses and group and count them.

Browse source
This commit is contained in:
Manuel Friedli 2020-09-17 11:46:38 +02:00
commit 31d67ed735
2 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored Normal file
View file

@ -0,0 +1 @@
*~

19
mitigate-ddos/ddos-mitigator.sh Executable file
View file

@ -0,0 +1,19 @@
#!/bin/sh
input_files=/var/log/apache2/access_*.log
tmpdir=$(mktemp -d)
cd "${tmpdir}"
cut -d' ' -f1 ${input_files} | sort > all.txt
grep ':' all.txt > raw-ipv6.txt
grep -v ':' all.txt > raw-ipv4.txt
uniq -c raw-ipv6.txt | sort -n > sorted-ipv6.txt
uniq -c raw-ipv4.txt | sort -n > sorted-ipv4-32.txt
cut -d. -f1-3 raw-ipv4.txt | sort | uniq -c | sort -n > sorted-ipv4-24.txt
cut -d. -f1-2 raw-ipv4.txt | sort | uniq -c | sort -n > sorted-ipv4-16.txt
cut -d. -f1 raw-ipv4.txt | sort | uniq -c | sort -n > sorted-ipv4-8.txt
echo "Have fun in ${tmpdir}!"