blob: 05a77acb7fccdd37510977ad6f215eecf9af955f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
#!/bin/bash
if [ x"${BASH_VERSINFO}" = x ]; then
echo "BASH_VERSINFO not found. Is \`/bin/bash\` a valid bash interpreter?"
exit 1
fi
if [ "${BASH_VERSINFO}" -lt 4 ]; then
echo "Bash version >= 4 required for declaring/using arrays/dicts."
exit 1
fi
export DESTHOST="host.lan"
export DESTUSER="someuser"
if [ x"$1" != x ]; then
DEST="$1"
else
DEST="${DESTUSER}@${DESTHOST}"
fi
if [ x"$2" != x ]; then
LOGCMD="$2"
else
LOGCMD="logread"
fi
if [ x"$3" != x ]; then
LOGREP="$3"
else
LOGREP="dropbear"
fi
LINE="-------------------------"
IFS=' ';
OUT=$(ssh -o LogLevel=Error ${DEST} ${LOGCMD} | \
sed -ne 's/.*'"${LOGREP}"'.*\s\+\([0-9\.]\+\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\).*/\1/p' | \
uniq | tr '\n' ' ')
declare -A ORIGINS
for host in ${OUT}; do \
echo "${host}" | grep -qoE '(192.168.|10.10.|172.)'
[ $? -eq 0 ] && continue
echo "${LINE}"
echo "HOST: ${host}"
GEOIP=$(geoiplookup "${host}")
if [ x"${ORIGINS["${GEOIP}"]}" != x ]; then
ORIGINS["${GEOIP}"]=$(expr ${ORIGINS["${GEOIP}"]} + 1)
else
ORIGINS["${GEOIP}"]=1
fi
echo "${GEOIP}"
done
echo "${LINE}"
echo -e "${LINE}\nEOF"
echo "${LINE}"
echo "COUNTRY STATS"
for origin in "${!ORIGINS[@]}"; do
echo "${origin} -> ${ORIGINS["${origin}"]}"
done
|