Hey Guys,
I have built a little app that you may like. I have for some reason been a target of a lot of web attacks lately and have been using Layer 7 rules to catch most of it.
But will all things internet I’m a little paranoid, and as this is a server running on my home network I like to make sure that there have been no successfully hacks.
What this app does is connect to your router (either via API or SSH) gets your IP Lists, and will then scan all files in a folder and search for those IP’s in your logs.
So as you can see below, the hacker got nothing but 404 errors from my webserver.
I do normally just drop their connections if they are in the List, but I want to check what exactly they were doing, so forward them to another webserver for now ![]()
It has also allowed to me tweak my layer 7 rule and not lock out genuine users any more. When I first noticed these errors in the logs I went a bit crazy and blocked out half my user base, but my searching their IP’s in the web logs I was quickly able to separate the rats from the mice.
Hope it helps someone, and it’s my first real attempt a C# so please let me know if you find any bugs ![]()
Up on Github if you like: https://github.com/woollensocks/Comparify
edited for minor bug fixes and save results not saving ![]()
Inspektor.zip (309 KB)
