block gitolite abuse master
authorKwadronaut <kwadronaut@leap.se>
Thu, 5 Mar 2020 08:41:06 +0000 (09:41 +0100)
committerKwadronaut <kwadronaut@leap.se>
Thu, 5 Mar 2020 08:41:06 +0000 (09:41 +0100)
gitolite-abuse [new file with mode: 0644]

diff --git a/gitolite-abuse b/gitolite-abuse
new file mode 100644 (file)
index 0000000..5d0d109
--- /dev/null
@@ -0,0 +1,16 @@
+# sometimes people try to abuse our gitolite.
+
+# You can simply iptable them, just doublecheck if it's not transifex/github mirror/...
+/var/log/apache2# cat error.log.1 | awk -F'[\ ]|[:]' '{print $13}' | sort -n | uniq -c | sort -nr | head -n 10
+awk: warning: escape sequence `\ ' treated as plain ` '
+  72781 74.217..
+   1166 148.251..
+    874 52.4..
+    830 5.9..
+
+# was it rebooted? 
+iptables-restore ~/ipv4-save
+iptables -A INPUT -s THOSEIPS -j DROP
+iptables-save >~/ip4-save
+
+tadaa besos from munin