Update README.md etc

This commit is contained in:
Sefinek committed 2024-12-19 15:55:58 +01:00
1 parent ce1b231dc8
commit 81e8f2c5f2
3 files changed
+73 -55

No files matched your search

+23 -30
View File
@@ -10,29 +10,27 @@ See also this: [sefinek/Cloudflare-WAF-To-AbuseIPDB](https://github.com/sefinek/
## 📋 Requirements
- Node.js + npm
- Git
## 🧪 Tested operating systems
- **Ubuntu Server:** 20.04 & 22.04
*If the distribution you're using to run this tool isn't listed here but works correctly, please create a new [Issue](https://github.com/sefinek/UFW-AbuseIPDB-Reporter/issues) or submit a [Pull request](https://github.com/sefinek/UFW-AbuseIPDB-Reporter/pulls).*
- [Node.js + npm](https://nodejs.org)
- [Git](https://git-scm.com)
## 📥 Installation
### curl
```bash
bash <(curl -s https://raw.githubusercontent.com/sefinek/UFW-AbuseIPDB-Reporter/main/install.sh)
cd ~
git clone https://github.com/sefinek/UFW-AbuseIPDB-Reporter.git
cd UFW-AbuseIPDB-Reporter
npm install
cp default.config.js config.js
sudo chmod 644 /var/log/ufw.log
node .
^C
npm uninstall corepack -g
npm install pm2 -g
pm2 startup
[Wklej komendę wygenerowana przez pm2 startup]
pm2 save
```
### wget
```bash
bash <(wget -qO- https://raw.githubusercontent.com/sefinek/UFW-AbuseIPDB-Reporter/main/install.sh)
```
The installation script will automatically download and configure the tool on your machine. During the installation process, you will be prompted to provide an [AbuseIPDB API token](https://www.abuseipdb.com/account/api).
## 🖥️ Usage
After successful installation, the script will run continuously in the background, monitoring UFW logs and automatically reporting malicious IP addresses.
@@ -41,25 +39,20 @@ The tool requires no additional user action after installation. However, it's wo
Servers open to the world are constantly scanned by bots, usually looking for vulnerabilities or other security gaps.
So don't be surprised if the next day, the number of reports to AbuseIPDB exceeds a thousand.
### 🔍 Checking service status
### 🔍 Checking logs
```bash
sudo systemctl status abuseipdb-ufw.service
```
To see the current logs generated by the process, use the command:
```bash
journalctl -u abuseipdb-ufw.service -f
pm2 logs ufw-abuseipdb
```
### 📄 Example report
```
Blocked by UFW (TCP on 80)
Source port: 28586
TTL: 116
Packet length: 48
TOS: 0x08
Blocked by UFW on vserver1 [80/tcp]
Source port: 23639
TTL: 247
Packet length: 40
TOS: 0x00
This report (for 46.174.191.31) was generated by:
This report (for 45.156.129.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
```