Linux-Server-Management-Toolkit

cschantz/Linux-Server-Management-Toolkit

Files

T

cschantz cae9db2d53 Fix established_conns parsing + increase Tier 4 DDoS scoring for instant blocking

Bug 1: Line 2363 integer expression error
Error: [: 0\n0: integer expression expected
Cause: grep -c with || echo 0 was outputting multiple lines
Fix: Changed to grep | wc -l with empty check

Bug 2: Tier 4 DDoS (512 SYN) only scoring 55 points, not auto-blocking
Problem: 500+ connection attacks getting detected but not blocked
Analysis:
  Base: 15 points
  Old Tier 4: +25 points
  Momentum: +15 points
  Total: 55 points (need 80 for auto-block)

Fix: Increased Tier 4 severity bonus from +25 to +50
New scoring for 512 SYN attack:
  Base: 15
  Tier 4: +50 (DOUBLED)
  Rapid Accel: +15
  Total: 80 points → INSTANT AUTO-BLOCK on first detection

Also adjusted other tiers proportionally:
  Tier 1: +5 → +8
  Tier 2: +10 → +15
  Tier 3: +15 → +30
  Tier 4: +25 → +50

Rationale:
- 500+ SYN_RECV is extreme attack
- Should block immediately, not wait for persistence
- User reported active 512-connection attack not blocking
- Now blocks on first 15-second detection cycle

2025-12-24 20:42:31 -05:00

bot-analyzer.sh

Fix menu standards: Add RED 0 back buttons to remaining 6 menus

2025-12-17 01:34:24 -05:00

enable-cphulk.sh

Fix cPHulk to use SQLite database instead of MySQL

2025-12-11 17:01:17 -05:00

firewall-activity-monitor.sh

Initial commit: Server Management Toolkit v2.0

2025-11-03 18:21:40 -05:00

ip-reputation-manager.sh

Fix final 10 HIGH integer comparisons in live-attack-monitor and ip-reputation-manager