Shell Programming and Scripting

[0000000362]: Session[29]: IP [80.11.22.33] Processing HTTP Socket [20] Command [GET ]
[0000000363]: Connecting User-Agent Media: [ Mozilla/4.0]
[0000000364]: NOT Rejected Media[ Mozilla/4.0]
[0000000365]: Session[29]: Username [myfriend] Request Channel [6.gate]
[0000000366]: Username [myfriend] : Check if he is in User Database
[0000000367]: Username [myfriend] : not in the User Database
[0000000368]: Session[34]: IP [90.11.22.44] Processing HTTP Socket [20] Command [GET ]
[0000000369]: Connecting User-Agent Media: [ Mozilla/4.0]
[0000000370]: NOT Rejected Media[ Mozilla/4.0]
[0000000371]: Session[34]: Username [myfriend2] Request Channel [6.gate]
[0000000372]: Username [myfriend2] : Check if he is in User Database
[0000000373]: Username [myfriend2] : found in User Database
[0000000374]: Session[45]: IP [100.11.22.44] Processing HTTP Socket [20] Command [GET ]
[0000000375]: Connecting User-Agent Media: [ Mozilla/4.0]
[0000000376]: NOT Rejected Media[ Mozilla/4.0]
[0000000377]: Session[45]: Username [myfriend3] Request Channel [6.gate]
[0000000378]: Username [myfriend3] : Check if he is in User Database
[0000000379]: Username [myfriend3] : not in the User Database

myfriend  80.11.22.33 
myfriend3 100.11.22.44

#!/bin/ksh
elog="${0##*/}.$$"
awk -v elog="$elog" '
/ IP [[]/ {
        if(match($0, /([[:digit:]]+[.]){3}[[:digit:]]+/))
                ip = substr($0, RSTART, RLENGTH)
        else {  printf("IP address not found in line \"%s\"\n", $0) > elog
                ec = 1
        }
        next
}       
/found in User Database/ {
        ip = ""
}
/not in the User Database/ {
        if(match($0, /Username [[][^]]*/) == 0) {
                printf("Username not found in line \"%s\"\n", $0) > elog
                ec = 1
        } else {un = substr($0, RSTART + 10, RLENGTH - 10)
                printf("%s %s\n", un, ip)
        }       
        ip = un = ""
}       
END {   exit ec
}' log
ec=$?
if [ $ec -ne 0 ]
then    cat "$elog" >&2
        rm "$elog"
fi      
exit $ec

myfriend 80.11.22.33
myfriend3 100.11.22.44

awk -F'[][]' '{F6[NR%6]=$6} /not in the User Database/{print $4, F6[(NR-5)%6]}' file

awk     '               {gsub (/\]|\[/,"")}
         $3=="IP"       {IP=$4}
         /not in.*base/ {print $3, IP}
        ' file
myfriend 80.11.22.33
myfriend3 100.11.22.44

*/10 * * * * root /var/bin/iplist.sh

#!/bin/bash
cd /usr/local/darwin
awk -F'[][]' '{F6[NR%6]=$6} /not in the User Database/{print $4, F6[(NR-5)%6]}' system_backup.log > fail2ban.txt
sleep 1
grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' fail2ban.txt > daemon.log
fi

15.41.150.134
15.41.10.134
15.41.30.134
15.41.50.134
15.41.60.134
16.41.80.134
16.41.90.134
17.41.44.134

[darwin]
enabled = true
port = 8000,1934,5544,7001,7002,7003
filter = darwin
logpath = /usr/local/darwin/daemon.log
maxretry = 1
bantime = 3600

[Definition]
failregex = .* <HOST>
ignoreregex =