Update README.md etc
This commit is contained in:
1 parent
ce1b231dc8
commit
81e8f2c5f2
3 files changed
+73
-55
No files matched your search
@@ -10,29 +10,27 @@ See also this: [sefinek/Cloudflare-WAF-To-AbuseIPDB](https://github.com/sefinek/
|
||||
|
||||
|
||||
## 📋 Requirements
|
||||
- Node.js + npm
|
||||
- Git
|
||||
|
||||
|
||||
## 🧪 Tested operating systems
|
||||
- **Ubuntu Server:** 20.04 & 22.04
|
||||
|
||||
*If the distribution you're using to run this tool isn't listed here but works correctly, please create a new [Issue](https://github.com/sefinek/UFW-AbuseIPDB-Reporter/issues) or submit a [Pull request](https://github.com/sefinek/UFW-AbuseIPDB-Reporter/pulls).*
|
||||
- [Node.js + npm](https://nodejs.org)
|
||||
- [Git](https://git-scm.com)
|
||||
|
||||
|
||||
## 📥 Installation
|
||||
### curl
|
||||
```bash
|
||||
bash <(curl -s https://raw.githubusercontent.com/sefinek/UFW-AbuseIPDB-Reporter/main/install.sh)
|
||||
cd ~
|
||||
git clone https://github.com/sefinek/UFW-AbuseIPDB-Reporter.git
|
||||
cd UFW-AbuseIPDB-Reporter
|
||||
npm install
|
||||
cp default.config.js config.js
|
||||
sudo chmod 644 /var/log/ufw.log
|
||||
node .
|
||||
^C
|
||||
npm uninstall corepack -g
|
||||
npm install pm2 -g
|
||||
pm2 startup
|
||||
[Wklej komendę wygenerowana przez pm2 startup]
|
||||
pm2 save
|
||||
```
|
||||
|
||||
### wget
|
||||
```bash
|
||||
bash <(wget -qO- https://raw.githubusercontent.com/sefinek/UFW-AbuseIPDB-Reporter/main/install.sh)
|
||||
```
|
||||
|
||||
The installation script will automatically download and configure the tool on your machine. During the installation process, you will be prompted to provide an [AbuseIPDB API token](https://www.abuseipdb.com/account/api).
|
||||
|
||||
|
||||
## 🖥️ Usage
|
||||
After successful installation, the script will run continuously in the background, monitoring UFW logs and automatically reporting malicious IP addresses.
|
||||
@@ -41,25 +39,20 @@ The tool requires no additional user action after installation. However, it's wo
|
||||
Servers open to the world are constantly scanned by bots, usually looking for vulnerabilities or other security gaps.
|
||||
So don't be surprised if the next day, the number of reports to AbuseIPDB exceeds a thousand.
|
||||
|
||||
### 🔍 Checking service status
|
||||
### 🔍 Checking logs
|
||||
```bash
|
||||
sudo systemctl status abuseipdb-ufw.service
|
||||
```
|
||||
|
||||
To see the current logs generated by the process, use the command:
|
||||
```bash
|
||||
journalctl -u abuseipdb-ufw.service -f
|
||||
pm2 logs ufw-abuseipdb
|
||||
```
|
||||
|
||||
### 📄 Example report
|
||||
```
|
||||
Blocked by UFW (TCP on 80)
|
||||
Source port: 28586
|
||||
TTL: 116
|
||||
Packet length: 48
|
||||
TOS: 0x08
|
||||
Blocked by UFW on vserver1 [80/tcp]
|
||||
Source port: 23639
|
||||
TTL: 247
|
||||
Packet length: 40
|
||||
TOS: 0x00
|
||||
|
||||
This report (for 46.174.191.31) was generated by:
|
||||
This report (for 45.156.129.52) was generated by:
|
||||
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
||||
```
|
||||
|
||||
|
||||
Reference in new issue
Block a user