shell script to see who is knocking at your anonymous FTP door...

[DC <dan.newsletter@xxxxxxxxxxx>]

Hi,

Run this little pipe to see who has tried to access your anonymous FTP
account. You *have* disabled your anonymous FTP account haven't you? This
will tell you who wants to abuse your server - allowing you to block access
altogether.

note: this is configured to work in iTools7. I think you could probably
change the path to the FTP log and see the same results in 6.5.7...

Remove the backslashes and the carriage returns and put it all on one line.

more /Library/Tenon/FTPServer/Logs/ftp.log | \
grep anonymous | awk '{print $7}' | sort | \
uniq | awk -F "[" '{print $1}' | cut -c2- | \
xargs -n1 host | awk '{print $5}'

You can remove the pipes one-by-one on the end to progressively see how this
mechanism is getting down to the list of anonymous login attempts.

If anyone wants to improve on this, feel free to send me refinements.

dan

---------
Tenon Intersystems' iTools Mailing List
To unsubscribe: send mail to 
itools-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives 
at:
http://itools.blackpepper.co.nz/