/TrumpsWall

This program will scan the fail2ban.log and auth.log files looking for hacking/port scanning attempts. If someone gets banned, or a port scan is detected, the program will determine the country code of the attacker using https://www.abuseipdb.com/check/xxx.xxx.xxx.xxx and compare that to a "Bad Country" settings file. Any country code in that file will get the command "sudo iptables -I INPUT 3 -s xxx.xxx.0.0/16 -j DROP" run on that IP. If the country code is not in that file then it will simply do a normal drop on the IP running this command: "sudo iptables -I INPUT 3 -s xxx.xxx.xxx.xxx -j DROP".

Primary LanguageJava

Watchers