09-22-2009
Thanks a lot, it worked out..
Now, I would like to automate the process via cron;
Here below the last log from the server:
stybloga ftpd20571 ::ffff:80.99.99. Sun Sep 20 08:52 gone - no logout
stybloga ftpd20569 ::ffff:79.117.15 Sun Sep 20 08:52 gone - no logout
stybloga ftpd20568 ::ffff:95.223.19 Sun Sep 20 08:52 still logged in
stybloga ftpd20553 ::ffff:188.27.12 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20552 ::ffff:85.66.149 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20550 ::ffff:84.227.20 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20534 ::ffff:89.102.22 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20518 ::ffff:89.173.62 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20511 ::ffff:94.19.144 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20509 ::ffff:89.103.12 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20508 ::ffff:86.101.22 Sun Sep 20 08:51 gone - no logout
stybloga ftpd20507 ::ffff:80.2.176. Sun Sep 20 08:51 gone - no logout
Where :
stybloga -> is the username
::ffff:80.2.1 -> ip address connected to the users.
What I am doing right now is
1) last | grep stybloga | awk '{print $3}' > one
2) awk -F. '{$0=((!$NF)?$0:$0FS)"0/8"}1' one > ipblck
3) Using the bash script, I will block the ip's
#!/bin/bash
BLOCKDB=/root/ipblck
IPS=$(grep -Ev "^#" $BLOCKDB)
for i in $IPS
do
iptables -A INPUT -s $i -j DROP
iptables -A OUTPUT -d $i -j DROP
done
So, now what I am trying is, there are different user like the same as above using different ip adderss.
1) Need to check the users in the last log, if a user count exceeds more than of 10 times,
2) Then it should check the third value, which is the ip address . If that do differs with different ip address for the 10 counts then
3) then the ip address should be taken and do as like the process what I have mentioned above.. the 3 steps that I am doing now..
I hope it make sense...
Regards
Siva
Last edited by gsiva; 09-22-2009 at 12:59 PM..
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
Hi Guys/Gals,
I have a log file that is updated once every few seconds and I am looking for a way to speed up one of my scripts.
Basically what I am trying to do is grep through a text file from start to finish once. Then each subsequent grep starts at the last line of the previous grep to... (4 Replies)
Discussion started by: Jerrad
4 Replies
2. Shell Programming and Scripting
Hi,
Does anyone know if its possible to add something like an end of line like c or java in unix?
dirs=/home/nosnam
var=''
for dir in $dirs
do
listDirs=`ls -d1 $dir/*`
for eachList in $listDirs
do
listRepos=`du -ks $eachList | awk '{ x+=$1 }; END { print x... (4 Replies)
Discussion started by: nosnam
4 Replies
3. Shell Programming and Scripting
Hi All
I have a script which has produced a list, I have used 'sed' to number my list, but i want to list at end of line with the first line starting at zero (0) and brackets round it
ie
My List i want
Hello (0)
this (1)
day (2)
can (3)
be (4)
sed '/./=' filename | sed '/./N; s/\n/) /'... (5 Replies)
Discussion started by: chassis
5 Replies
4. UNIX for Advanced & Expert Users
Hi i would like to add line numbers to end of each line in a file.
I am able to do it in the front of each line using sed, but not able to add at the end of the file.
Can anyone suggest
The following code adds line number to start of each line
sed = filename | sed 'N;s/\n/\t/'
how can i... (5 Replies)
Discussion started by: rudoraj
5 Replies
5. Shell Programming and Scripting
Hello, Would someone guide me on how to write a shell script the would search for a phone no using at the end text file using sed or awk and store it in a varaible or print it.
The text file is in this form
text or numbers in first line
text or numbers in second line
.
.
.
Firsname... (6 Replies)
Discussion started by: amuthiga
6 Replies
6. Shell Programming and Scripting
hi,
i have file which is having large sql query
eg :
i am executing this sql file but now i want to add ; after query on same line
i.e. i should look like
any idea how to achieve it ? (6 Replies)
Discussion started by: crackthehit007
6 Replies
7. Shell Programming and Scripting
I have a file with varying record length in it. I need to reformat this file so that each line will have a length of 100 characters (99 characters + the line feed).
AU * A01 EXPENSE 6990370000 CWF SUBC TRAVEL & MISC
MY * A02 RESALE 6990788000 Y... (3 Replies)
Discussion started by: udelalv
3 Replies
8. Shell Programming and Scripting
Does anyone know how to use awk to act like grep from a particular line number to the end of file? I am using Solaris 10 and I don't have any GNU products installed.
Say I want to print all occurrences of red starting at line 3 to the end of file.
EXAMPLE FILE:
red
green
red
red... (1 Reply)
Discussion started by: thibodc
1 Replies
9. Shell Programming and Scripting
Given a file like this:
abc
def
ghi
I need to get to
somestandardtext abc1 morestandardtext
somestandardtext def2 morestandardtext
somestandardtext ghi3 morestandardtext
Notice that in addition to the standard text there is the line number added in as well. What I conceived is... (4 Replies)
Discussion started by: edstevens
4 Replies
10. Shell Programming and Scripting
How to add a comma at the end of each line in this file?30 1412
30 3352
30 5254
30 5543
30 7478
3 28
3 30
3 39
3 54
3 108
3 152
3 178
3 182
3 214
3 271
3 286
3 300
3 348
3 349
3 371 (3 Replies)
Discussion started by: gunjan
3 Replies
LEARN ABOUT LINUX
securenets
securenets(4) File Formats securenets(4)
NAME
securenets - configuration file for NIS security
SYNOPSIS
/var/yp/securenets
DESCRIPTION
The /var/yp/securenets file defines the networks or hosts which are allowed access to information by the Network Information Service
("NIS").
The format of the file is as follows:
o Lines beginning with the ``#'' character are treated as comments.
o Otherwise, each line contains two fields separated by white space. The first field is a netmask, the second a network.
o The netmask field may be either 255.255.255.255 (IPv4), ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff (IPv6) , or the string ``host'' indi-
cating that the second field is a specific host to be allowed access.
Both ypserv(1M) and ypxfrd(1M) use the /var/yp/securenets file. The file is read when the ypserv(1M) and ypxfrd(1M) daemons begin. If
/var/yp/securenets is present, ypserv(1M) and ypxfrd(1M) respond only to IP addresses in the range given. In order for a change in the
/var/yp/securenets file to take effect, you must kill and restart any active daemons using ypstop(1M) and ypstart(1M).
An important thing to note for all the examples below is that the server must be allowed to access itself. You accomplish this either by
the server being part of a subnet that is allowed to access the server, or by adding an individual entry, as the following:
hosts 127.0.0.1
EXAMPLES
Example 1: Access for Individual Entries
If individual machines are to be give access, the entry could be:
255.255.255.255 192.9.1.20
or
host 192.0.1.20
Example 2: Access for a Class C Network
If access is to be given to an entire class C network, the entry could be:
255.255.255.0 192.9.1.0
Example 3: Access for a Class B Network
The entry for access to a class B network could be:
255.255.0.0 9.9.0.0
Example 4: Access for an Invidual IPv6 Address
Similarly, to allow access for an individual IPv6 address:
ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff fec0::111:abba:ace0:fba5e:1
or
host fec0::111:abba:ace0:fba5e:1
Example 5: Access for all IPv6 Addresses Starting with fe80
To allow access for all IPv6 addresses starting with fe80:
ffff:: fe80::
FILES
/var/yp/securenets Configuration file for
NIS security.
SEE ALSO
ypserv(1M), ypstart(1M), ypstop(1M), ypxfrd(1M)
NOTES
The Network Information Service (NIS) was formerly known as Sun Yellow Pages (YP). The functionality of the two remains the same; only the
name has changed. The name Yellow Pages is a registered trademark in the United Kingdom of British Telecommunications plc, and may not be
used without permission.
SunOS 5.10 26 Apr 1999 securenets(4)