Add: WTF is happening? Let's tail all logs.

This commit is contained in:
benoit 2016-01-14 14:25:15 +01:00
parent 143ef4a26f
commit 5e406b2345

View file

@ -1,3 +1,9 @@
WTF is happening? Let's tail all logs.
```
# tail -f $(lsof | grep -F .log | tr -s '\t' ' ' | cut -d' ' -f10 | sort | uniq | tr -s '\n' ' ')
```
Search for suspects POST in apache.log (often attacks). Search for suspects POST in apache.log (often attacks).
```{.bash} ```{.bash}
grep -Eo '"POST .*.php' access.log | grep -ve cron -e login -e admin -e xmlrpc -e trackback -e comment -e 404 | sort -u grep -Eo '"POST .*.php' access.log | grep -ve cron -e login -e admin -e xmlrpc -e trackback -e comment -e 404 | sort -u