nimbda block script

Published 2001-11-16 21:35:00

I got a little fed up seeing all those nimbda in my apache logs - so this little script tries to fix that.


#!/bin/sh
grep -h cmd.exe /var/log/apache/*access.log \
  | cut -c 1-18 |grep ^'[0-9]' | grep -v ^'192.' \
  | sort -u | grep -E '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+*' \
  | awk '{ print "/sbin/ipchains -I input 1 -p tcp -s " $1 " -d 0/0 80 -i eth0 -j DENY\n" }'  \
  > /etc/blacklist
cat /etc/blacklist | sh

Mentioned By:
google.com : april (55 referals)
google.com : november (48 referals)
google.com : nimbda (9 referals)
google.com : block script (6 referals)
google.com : Apache blacklist (5 referals)
google.com : block script in php (4 referals)
google.com : H:\cmd.exe (4 referals)
google.com : how to block scripts (4 referals)
google.com : block script for apache (3 referals)
google.com : php block script (2 referals)
google.com : blacklist apache cmd.exe (2 referals)
google.com : blacklist ipchains script (2 referals)
google.com : block nimbda apache (2 referals)
google.com : block script php (2 referals)
google.com : how to block script with php (2 referals)
google.com : php block script (2 referals)
google.com : php blocking script (2 referals)
google.com : grep cmd.exe access_log nimbda (1 referals)
google.com : block referals apache (1 referals)
google.com : "apache blacklist" (1 referals)