Light

aran112000 / nope-php Goto Github PK

Nope! A lightweight tool for monitoring your log files and dynamically blocking nuisance or malicious IPs based on easy to define, dynamic rules which you control

License: MIT License

PHP 100.00%

linux security ban-hosts ips anti-bot attack-prevention log-analyzer monitoring ban-management php

nope-php's Introduction

Nope!

The log processing framework for blocking those pesky bots!

Designed as a fully customisable framework to process your log files in realtime block any activity identified as malicious using iptables and iplist.

Installation

If you're using composer, simply run:

composer require aran112000/nope-php

Current expected Nginx access log format

'[$time_local] $request_method $scheme://$host$request_uri "$request" "$status" "$http_x_forwarded_for" "$remote_addr" "$remote_user" "$bytes_sent" "$http_referer" "$http_user_agent" "$sent_http_content_type"'

Requirements

PHP >= 5.6.*
PHP Redis extension installed (if you want to track hits over time)
Log files for us to process in realtime

Getting pesky /wp-admin requests?

Check if your vhost supports Wordpress in realtime and if not, respond blocking the IP for a length of time you dictate.

nope-php's People

Contributors

Stargazers

Watchers

nope-php's Issues

[FEATURE] Package releases as a phar for easier installation in production

Package releases as a phar for easier installation in production

[FEATURE] Distributed blocklist across multiple servers

When running in a load-balanced environment, any bans need to be levied against all instances.

Would require a central Redis server, but will implement using a pub/sub mechanism so any server in the pool can alert all the others to also block once a rule has been violated

[FEATURE] Provide recommendations for running as a service

Provide recommendations for running as a service

[FEATURE] Improve whitelisting support

If you've got a whitelist rule that should only apply to a single domain or user agent string perhaps...

[BUG] Processing log lines failing after logrotate

Describe the bug
Currently, once a log file is rotated we're no longer able to process its contents until the number of lines in the fresh file catches up and overtakes the prior days again.

[PERF] How many requests can Nope! process per second

Benchmark in several environments the throughput Nope! can obtain with example rule structures

[FEATURE] Documentation

Add some!

[FEATURE] Support for processing multiple log files

Add support for processing multiple log files simultaneously ( pcntl_fork )

[FEATURE] Simpler way to implement new logs and map up the log format

Currently, the log format is buried in the core code which is awful and needs to be extracted.

As log formats are common to vary, we need a better way for this to be abstracted and managed - perhaps also a default list of the most common formats as templates to help users who aren't confident with regex

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.