DYNABLAST

Get each line in the Apache access_log logfile and count the number of hits for each IP/Host.
The IP/Host that exceed a given number of hits in the last timeperiod seconds will be printed in STDOUT, for example to blacklist the IP.
Ips/Hosts will be automatically deleted from blacklist if they don't appear anymore in the last access_log timeperiod.

Released under the terms of GPLv2 by Dino Ciuffetti, TuxWeb S.r.l.
We declines ALL RESPONSABILITY on its use!!
As any other opensource software, please use it at your own risk.

To use it:
# make
# ./dynablast -t120 -n200 -F -f /tmp/dynablast_fm.dat -l /tmp/dynablast.lock -a /var/log/apache2/access_log

The file named "access_log" will be quickly scanned and a report for the blacklisted IPs will be printed in STDOUT.
The next time you will do the same, you'll notice that it will work much more quickly. That's because it will skip
all already parsed lines that are not useful.

Ciao, Dino.