Aside

IP address Apache access logs

If You want find out which ip address occurs the most in apache logs (to determine botĀ attack) run :

cat access_log | awk '{print $1}' | sort | uniq -c | sort -n | tail

To determine if given IP occurs in iptables rules:

iptables -L -n -v | grep [ip_address]

That helped me a lot lately…

Advertisements