praegune kellaaeg 21.05.2024 17:20:58
|
Hinnavaatlus
:: Foorum
:: Uudised
:: Ärifoorumid
:: HV F1 ennustusvõistlus
:: Pangalink
:: Telekavad
:: HV toote otsing
|
|
autor |
sõnum |
|
Tint
HV veteran
liitunud: 26.01.2003
|
14.01.2022 16:10:48
fail2ban invalid URI path |
|
|
Tere,
Apache logis näen palju selliseid kirjeid ja tahaks antud hoste fail2bani abil blokkida. Googeldanud ja leidnud muud huvitavat, kuid sellest pole jagu saanud
Ilmselt peaks uue filtri tekitama kuid ei oska ise failregexit kokku panna
Apache/2.4.52
Fail2ban 0.11.1
error.log
[Fri Jan 14 05:18:08.339197 2022] [core:error] [pid 1451672] [client 193.118.53.218:56804] AH10244: invalid URI path (/icons/.%2e/%2e%2e/apache2/icons/sphere1.png)
[Fri Jan 14 05:18:08.515718 2022] [core:error] [pid 1451670] [client 193.118.53.218:57120] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png)
[Fri Jan 14 05:18:08.741433 2022] [core:error] [pid 1450809] [client 193.118.53.218:57528] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png)
[Fri Jan 14 05:18:29.409283 2022] [core:error] [pid 1450810] [client 193.118.53.218:39750] AH10244: invalid URI path (/icons/.%2e/%2e%2e/apache2/icons/sphere1.png)
[Fri Jan 14 05:18:29.623055 2022] [core:error] [pid 1450808] [client 193.118.53.218:40274] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png)
[Fri Jan 14 05:18:29.856327 2022] [core:error] [pid 1455649] [client 193.118.53.218:40686] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png) |
access.log
193.118.53.218 - - [14/Jan/2022:05:18:07 +0200] "GET / HTTP/1.1" 200 7240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:08 +0200] "HEAD /icons/sphere1.png HTTP/1.1" 200 5486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:08 +0200] "HEAD /icons/.%2e/%2e%2e/apache2/icons/sphere1.png HTTP/1.1" 400 5380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:08 +0200] "HEAD /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png HTTP/1.1" 400 5380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:08 +0200] "HEAD /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png HTTP/1.1" 400 5380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:28 +0200] "GET / HTTP/1.1" 200 7244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:29 +0200] "HEAD /icons/sphere1.png HTTP/1.1" 200 5490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:29 +0200] "HEAD /icons/.%2e/%2e%2e/apache2/icons/sphere1.png HTTP/1.1" 400 5384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:29 +0200] "HEAD /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png HTTP/1.1" 400 5384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.218 - - [14/Jan/2022:05:18:29 +0200] "HEAD /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png HTTP/1.1" 400 5384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" |
On kellelgi kogemusi?
Tänud ette
|
|
tagasi üles |
|
|
ufo56
HV Guru
liitunud: 18.11.2004
|
|
tagasi üles |
|
|
Tint
HV veteran
liitunud: 26.01.2003
|
17.01.2022 11:20:39
|
|
|
Sain igatahes jagu, tehes uue regexi
(?i)[[]client <HOST>(:\d{1,5})?[]]( .*)? invalid URI .*
|
|
tagasi üles |
|
|
|
lisa lemmikuks |
|
|
sa ei või postitada uusi teemasid siia foorumisse sa ei või vastata selle foorumi teemadele sa ei või muuta oma postitusi selles foorumis sa ei või kustutada oma postitusi selles foorumis sa ei või vastata küsitlustele selles foorumis sa ei saa lisada manuseid selles foorumis sa võid manuseid alla laadida selles foorumis
|
|
Hinnavaatlus ei vastuta foorumis tehtud postituste eest.
|