diff --git a/log_sshd b/log_sshd new file mode 100755 index 0000000..c97ba22 --- /dev/null +++ b/log_sshd @@ -0,0 +1,18 @@ +#!/bin/bash + +DATE=$(date +"%Y_%m_%d") +NUMBER="/nas/share/brickman/logs/sshd/ssh_attempts.log" +DAILY_FILE="/nas/share/brickman/logs/sshd/ssh_${DATE}.log" + + +echo -n "`date +"%b %e"`: " >> $NUMBER +ATTEMPTS=$(cat /var/log/auth.log /var/log/auth.log.1 | grep "`date +"%b %e"`" | zgrep sshd | grep rhost | sed -re 's/.*rhost=([^ ]+).*/\1/' | sort | wc -l) +echo $ATTEMPTS >> $NUMBER + +echo "-----$(date)-----" >> $DAILY_FILE +echo >> $DAILY_FILE +echo "Total Number of Failed Attempts: ${ATTEMPTS}" >> $DAILY_FILE +echo " COUNT | IP ADDRESS" >> $DAILY_FILE +cat /var/log/auth.log* | grep "`date +"%b %e"`" | zgrep sshd | grep rhost | sed -re 's/.*rhost=([^ ]+).*/\1/' | sort | uniq -c | sort -u >> $DAILY_FILE + +echo >> $DAILY_FILE diff --git a/log_stats b/log_stats new file mode 100755 index 0000000..604c364 --- /dev/null +++ b/log_stats @@ -0,0 +1,43 @@ +#!/bin/bash + + +DATE=$(date +"%Y_%m_%d") +FILE="/nas/share/brickman/logs/nginx/log_${DATE}_FULL.log" +FILE_M="/nas/share/brickman/logs/nginx/log_${DATE}_SHORT.log" + +# Complete file +echo "-----$(date)-----" >> $FILE +echo "" >> $FILE +# Short File +echo "-----$(date)-----" >> $FILE_M +echo "" >> $FILE_M + + +for IP in `grep -E -o "^[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}" /var/log/nginx/access.log | sort | uniq` +do + REQ_NUM=$(grep $IP /var/log/nginx/access.log | wc -l) + + + echo "--------------------" >> $FILE + echo "IP: $IP" >> $FILE + echo "NUMBER OF REQUESTS: ${REQ_NUM}" >> $FILE + echo "HTTP Status Codes" >> $FILE + echo " COUNT | HTTP CODE" >> $FILE + grep $IP /var/log/nginx/access.log | grep -o " [1-5][0-9][0-9] "| sort | uniq -c >> $FILE + echo >> $FILE + + if [ $REQ_NUM -gt 25 ] + then + echo "--------------------" >> $FILE_M + echo "IP: $IP" >> $FILE_M + echo "NUMBER OF REQUESTS: ${REQ_NUM}" >> $FILE_M + echo "HTTP Status Codes" >> $FILE_M + echo " COUNT | HTTP CODE" >> $FILE_M + grep $IP /var/log/nginx/access.log | grep -o " [1-5][0-9][0-9] "| sort | uniq -c >> $FILE_M + echo >> $FILE_M + fi +done + + +echo "-----DONE-----" >> $FILE +echo "-----DONE-----" >> $FILE_M