firewall/modules/module-akkoma-search.sh

#!/bin/bash
FIREWALL="/opt/firewall/firewall.sh"
NFT_CACHE='/tmp/nft.cache'
ACCESS="/tmp/minute.log"
ATTACK="module-akkoma-search"
SEARCH_SPAM=$(grep $2 $ACCESS | grep "api/v2/search" | grep $1 | wc -l)
CHECK=$(cat $NFT_CACHE | sort -u | grep $1)
if [[ "$SEARCH_SPAM" -gt 10 ]]; then
	echo "$IP $CHECK $COUNT"
	if [ "$CHECK" = "" ]; then
		bash $FIREWALL ipBlockParser "$1"
		bash $FIREWALL message "$ATTACK-$1"
		redis-cli SADD tmp_block $1
	else
		echo "$ATTACK Ignoring Duplicate IP: $1"
	fi
fi