fail2ban apache -бадботы уже забанены, это не странно? - PullRequest
1 голос
/ 13 апреля 2020
2020-04-13 13:20:30,519 fail2ban.filter         [24545]: INFO    [apache-badbots] Found 54.36.148.99 - 2020-04-13 13:20:30
2020-04-13 13:20:31,049 fail2ban.actions        [24545]: WARNING [apache-badbots] 54.36.148.99 already banned
2020-04-13 13:20:31,050 fail2ban.actions        [24545]: NOTICE  [apache-badbots] Reban 54.36.148.99, action 'iptables-multiport'
2020-04-13 13:20:31,727 fail2ban.filter         [24545]: INFO    [apache-badbots] Found 114.119.167.104 - 2020-04-13 13:20:31
2020-04-13 13:20:32,275 fail2ban.actions        [24545]: WARNING [apache-badbots] 114.119.167.104 already banned
2020-04-13 13:20:32,275 fail2ban.actions        [24545]: NOTICE  [apache-badbots] Reban 114.119.167.104, action 'iptables-multiport'
2020-04-13 13:20:33,538 fail2ban.filter         [24545]: INFO    [apache-badbots] Found 114.119.166.94 - 2020-04-13 13:20:33
2020-04-13 13:20:34,299 fail2ban.actions        [24545]: WARNING [apache-badbots] 114.119.166.94 already banned
2020-04-13 13:20:34,300 fail2ban.actions        [24545]: NOTICE  [apache-badbots] Reban 114.119.166.94, action 'iptables-multiport'
2020-04-13 13:20:57,251 fail2ban.filter         [24545]: INFO    [apache-badbots] Found 114.119.164.59 - 2020-04-13 13:20:56
2020-04-13 13:20:57,556 fail2ban.actions        [24545]: WARNING [apache-badbots] 114.119.164.59 already banned
2020-04-13 13:20:57,556 fail2ban.actions        [24545]: NOTICE  [apache-badbots] Reban 114.119.164.59, action 'iptables-multiport'

Это не странно?

Если забанить, они больше не смогут вводить ...

, и фактически в моих журналах доступа я вижу это, в частности

"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; AspiegelBot)"

, который должен блокироваться фильтром apache -badbots ...

Нужно ли беспокоиться? Или это нормальное поведение fali2ban?

Мой сервер - Centos 8.

...