|
This PerlScript will block
The port checker 1 cgi script
Prevents visitors using
Do you have pages that you
visitors from accessing a
will check ports on your
download managers from
want to keep visitors off
certain page based on their
computer to see if they are
leeching images and programs
such as login and security
IP address or an entire IP
open, closed, or do they
from your website. Many
pages? Do you want to know
range. You can add as many
responding. This will give
visitors may be getting all
as soon as a visitor lands
IPs as you wish with little
you a good indicator as to
they want from your website
in a particular page because
code modification.
the status of your computers
without actually viewing it
you're just curious? Well,
security status.
The
and your sponsors. This is a
PerlSpy is a script that
port checker cgi script can
powerful script for sites
sends you an email alert the
check unlimited number of
with free content who make
moment someone visits any
ports. Ports can be easily
the majority of their money
"marked" page with
added or removed in script
with sponsors. Can save you
all the info you need to
just by opening it with
a bundle in bandwidth costs
know about that visitor such
notepad. Script checks ANY
as well.
as IP, Host DNS, exact time
IP address you want, except
of visit, the referring URL,
reseved ones.
the browser, OS, ...etc. You
can easily "mark"
those pages by inserting one
line of HTML in them and the
script does the rest.
PerlSpy is not really a
security system, it's not a
counter either; it's
something in between. Its
applications are countless
and depend only on your
imagination and curiosity.
Just don't flood yourself
with emails if you're
expecting millions of
visitors :)
Date: Oct, 23 2003 Date: Sep, 12 2006 Date: May, 22 2006 Date: Apr, 30 2005 |
|
This script was written to
This script, when properly
Tired of losing Bandwidth to
Find the most common way of
help stop automated brute
installed, will log and
hotlinkers? This script
hacking and be notified by
force attacks against your
track any failed
allows you to control from
email/pager around the
website. Are you tired of
authentication attempts for
where people can access your
clock.
Most hackers use
seeing www.yourdomain.com...
your members area(s). When
site/images. This allows you
/tmp to hack linux servers
...cmd.exe in your log
the failed number of
to specify not only
by writing some file in /tmp
files? This script uses a
attempts coming from one
unauthorized domains but
directory and call it
custom 404 page that logs
certain IP exceeds a limit
also PAGES in your own
remotely to play around in
the IP address of the person
you set, the script will
domain. You can tell it to
your server.
If you are
making the 404 requests and
automatically block that IP
only allow file or image
offering shared-hosting or
after so many requests it
from accessing your entire
downloads from certain pages
web hosting services on your
adds that IP to the IIS
site. This will also
in your domain. You can
server, then you are making
servers deny list. There is
effectively block any person
block hotlinkers and
this much easier for hackers
some HOWTO information with
trying to brute-force their
bandwidth leeches completely.
to find access to your /tmp
the download...Be sure to
way into your members
directory. There are many
read the README.html file!
area(s). Whenever a block
ways of closing or limiting
This script works against
is placed, you will be
their access to this
requests made via browser,
notified by e-mail so you
directory such as running
wget, raw HTTP...maybe more.
can take the appropriate
PHP with suEXEC Support. I
I updated this script to use
action, e.g. contact the
assume you already know all
a safe.log. You can add Ip's
offenders ISP. The blocking
of those and you have a very
you dont want to ban in the
system is totally automated,
secure /tmp directory.
safe log. IP's you might not
provided you have set up the
However, often hackers find
want to ban are those used
correct .htaccess entries.
newer ways of accessing this
by Googlebot or Slurp (yahoo
directory. Therefore, it is
bot).
necessary to check this
directory often to make sure
nothing is going on without
you knowing it. Following
script was written to check
/tmp directory or any other
directory and notify the
admin if any un-authorized
file exists.
To keep this
example simple, we are
looking into each file and
look for different keywords
such as "perl".
Keep in mind that this
script can only detect files
with source, not
executables. This is still
very useful as most hackers
use wget method to write
something into this
directory.
You could
setup a cron-job to run this
every few minutes and have
it email you as soon as it
finds something. Script will
also create a log file of
what it finds.
Date: Oct, 12 2005 Date: Feb, 24 2006 Date: Aug, 28 2003 Date: Jun, 09 2005 |