[prev in list] [next in list] [prev in thread] [next in thread]
List: fail2ban-users
Subject: Re: [Fail2ban-users] Help with filter apache-noscript...
From: Bill Shirley <bshirley () openmri-scottsboro ! com>
Date: 2016-07-02 3:12:11
Message-ID: 5777310B.8090708 () openmri-scottsboro ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
The filters change from release to release. They're trying to stay in sync with \
Apache 2.2/2.4 message changes. You should post your apache-noscript filter.
Bill
On 6/30/2016 7:49 PM, admin@redtailbooks.com wrote:
> Shouldn't the filter apache-noscript.conf be catching these attempts?
>
> > [Wed Jun 22 13:52:33.945066 2016] [:error] [pid 1056] [client \
> > 146.185.251.48:40811] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:54:04.439357 2016] [:error] [pid 1053] [client \
> > 146.185.251.48:47395] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:54:17.453896 2016] [:error] [pid 1349] [client \
> > 146.185.251.48:37233] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:54:37.134533 2016] [:error] [pid 1054] [client \
> > 146.185.251.48:58010] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:54:56.203655 2016] [:error] [pid 1052] [client \
> > 146.185.251.48:63348] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:56:02.705916 2016] [:error] [pid 1056] [client \
> > 146.185.251.48:41745] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:56:32.664866 2016] [:error] [pid 1053] [client \
> > 146.185.251.48:50140] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat [Wed Jun 22 13:56:37.995857 2016] [:error] [pid 1349] [client \
> > 146.185.251.48:48235] script '/var/www/html/xmlrpc.php' not found or unable to \
> > stat
>
> or similar attempts
>
> > [Thu Jun 23 19:57:43.196719 2016] [:error] [pid 1899] [client \
> > 37.26.128.179:56834] script '/www/publicHtml/myiphb.php' not found or unable to \
> > stat [Thu Jun 23 19:57:48.851338 2016] [:error] [pid 1900] [client \
> > 37.26.128.179:38994] script '/www/publicHtml/myiphd.php' not found or unable to \
> > stat [Thu Jun 23 19:57:54.503360 2016] [:error] [pid 1901] [client \
> > 37.26.128.179:46461] script '/www/publicHtml/myiphd.php' not found or unable to \
> > stat [Thu Jun 23 19:58:00.158356 2016] [:error] [pid 1898] [client \
> > 37.26.128.179:62273] script '/www/publicHtml/myiphd.php' not found or unable to \
> > stat [Thu Jun 23 19:58:05.591417 2016] [:error] [pid 1897] [client \
> > 37.26.128.179:57190] script '/www/publicHtml/myiphd.php' not found or unable to \
> > stat [Thu Jun 23 19:58:06.020256 2016] [:error] [pid 1967] [client \
> > 37.26.128.179:61560] script '/www/publicHtml/myiphd.php' not found or unable to \
> > stat [Thu Jun 23 19:58:06.445667 2016] [:error] [pid 1899] [client \
> > 37.26.128.179:55832] script '/www/publicHtml/myiphb.php' not found or unable to \
> > stat [Thu Jun 23 19:58:06.870073 2016] [:error] [pid 1900] [client \
> > 37.26.128.179:60554] script '/www/publicHtml/myiphc.php' not found or unable to \
> > stat
>
> Thanks,
> dave
>
> --
> Red-Tail Books
> 204 N Florence St
> Casa Grande, Az
> 520-836-0370
>
>
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
>
>
> _______________________________________________
> Fail2ban-users mailing list
> Fail2ban-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
[Attachment #5 (text/html)]
<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
The filters change from release to release. They're trying to stay
in sync with Apache 2.2/2.4 message changes. You<br>
should post your apache-noscript filter.<br>
<br>
Bill<br>
<br>
<div class="moz-cite-prefix">On 6/30/2016 7:49 PM,
<a class="moz-txt-link-abbreviated" \
href="mailto:admin@redtailbooks.com">admin@redtailbooks.com</a> wrote:<br> </div>
<blockquote
cite="mid:679c338e-7e14-006a-2c4a-6df714c50278@redtailbooks.com"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<font face="Helvetica, Arial, sans-serif">Shouldn't the filter
apache-noscript.conf be catching these attempts?<br>
<br>
<blockquote type="cite">[Wed Jun 22 13:52:33.945066 2016]
[:error] [pid 1056] [client 146.185.251.48:40811] script
'/var/www/html/xmlrpc.php' not found or unable to stat<br>
[Wed Jun 22 13:54:04.439357 2016] [:error] [pid 1053] [client
146.185.251.48:47395] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
[Wed Jun 22 13:54:17.453896 2016] [:error] [pid 1349] [client
146.185.251.48:37233] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
[Wed Jun 22 13:54:37.134533 2016] [:error] [pid 1054] [client
146.185.251.48:58010] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
[Wed Jun 22 13:54:56.203655 2016] [:error] [pid 1052] [client
146.185.251.48:63348] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
[Wed Jun 22 13:56:02.705916 2016] [:error] [pid 1056] [client
146.185.251.48:41745] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
[Wed Jun 22 13:56:32.664866 2016] [:error] [pid 1053] [client
146.185.251.48:50140] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
[Wed Jun 22 13:56:37.995857 2016] [:error] [pid 1349] [client
146.185.251.48:48235] script '/var/www/html/xmlrpc.php' not
found or unable to stat<br>
<br>
</blockquote>
<br>
or similar attempts<br>
<br>
<blockquote type="cite">[Thu Jun 23 19:57:43.196719 2016]
[:error] [pid 1899] [client 37.26.128.179:56834] script
'/www/publicHtml/myiphb.php' not found or unable to stat<br>
[Thu Jun 23 19:57:48.851338 2016] [:error] [pid 1900] [client
37.26.128.179:38994] script '/www/publicHtml/myiphd.php' not
found or unable to stat<br>
[Thu Jun 23 19:57:54.503360 2016] [:error] [pid 1901] [client
37.26.128.179:46461] script '/www/publicHtml/myiphd.php' not
found or unable to stat<br>
[Thu Jun 23 19:58:00.158356 2016] [:error] [pid 1898] [client
37.26.128.179:62273] script '/www/publicHtml/myiphd.php' not
found or unable to stat<br>
[Thu Jun 23 19:58:05.591417 2016] [:error] [pid 1897] [client
37.26.128.179:57190] script '/www/publicHtml/myiphd.php' not
found or unable to stat<br>
[Thu Jun 23 19:58:06.020256 2016] [:error] [pid 1967] [client
37.26.128.179:61560] script '/www/publicHtml/myiphd.php' not
found or unable to stat<br>
[Thu Jun 23 19:58:06.445667 2016] [:error] [pid 1899] [client
37.26.128.179:55832] script '/www/publicHtml/myiphb.php' not
found or unable to stat<br>
[Thu Jun 23 19:58:06.870073 2016] [:error] [pid 1900] [client
37.26.128.179:60554] script '/www/publicHtml/myiphc.php' not
found or unable to stat<br>
</blockquote>
<br>
Thanks,<br>
dave<br>
</font> <br>
<pre class="moz-signature" cols="72">--
Red-Tail Books
204 N Florence St
Casa Grande, Az
520-836-0370</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
<a class="moz-txt-link-freetext" \
href="http://sdm.link/attshape">http://sdm.link/attshape</a></pre> <br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Fail2ban-users mailing list
<a class="moz-txt-link-abbreviated" \
href="mailto:Fail2ban-users@lists.sourceforge.net">Fail2ban-users@lists.sourceforge.net</a>
<a class="moz-txt-link-freetext" \
href="https://lists.sourceforge.net/lists/listinfo/fail2ban-users">https://lists.sourceforge.net/lists/listinfo/fail2ban-users</a>
</pre>
</blockquote>
<br>
</body>
</html>
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic