logfile Country resolver

Use like


head -1 access_crowdsec.log
93.229.122.46 - - [27/Feb/2025:00:00:02 +0100] "GET /pages/images/website/home/2502-01.jpg HTTP/1.1" 200 60233 "https://www.plainpicture.com/de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"

head -1 access_crowdsec.log | ./resolver
EU|Germany|93.229.122.46|-|-|[27/Feb/2025:00:00:02|+0100]|"GET|/pages/images/website/home/2502-01.jpg|HTTP/1.1"|200|60233|"https://www.plainpicture.com/de"|"Mozilla/5.0|(Macintosh;|Intel|Mac|OS|X|10_15_7)|AppleWebKit/537.36|(KHTML,|like|Gecko)|Chrome/133.0.0.0|Safari/537.36"

# or

cat access_crowdsec.log | stdbuf -o0 grep "/search" | grep -v "Safari/" | stdbuf -o0 /tmp/resolver | stdbuf -o0 egrep "Russia|Belarus|^SA|^AS|^AF"  > block_20250227.txt
cscli decisions delete --all; cat block_20250227.txt | cut -d"|" -f3 | perl -ne 's/(\d+)\.(\d+)\..*/$1.$2/; print ' | uniq | perl -ne 'chomp;print $_,".0.0/16\n"' | cscli decisions import -i - --format values -d48h -R toomuch_AS_SA_AF

packaging

pyinstaller --onefile resolv.py

1.1 KiB Raw Blame History

logfile Country resolver

Use like

packaging

1.1 KiB

Raw Blame History