Banni apache-noscript

Plugins Monitoring
1

Bonjour,

Ne devrait il pas y avoir 1 dans le nombre de « Banni apache-noscript » ?

Capture d’écran 2023-10-30 183422
Capture d’écran 2023-10-30 183422428×690 26.6 KB

2

Salut,

As-tu le log du plugin?

3 
[2023-10-30 19:07:04] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 19:07:04] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 19:07:04] fail2ban.DEBUG: |  |- Total failed:	63 [] []
[2023-10-30 19:07:04] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 19:07:04] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 19:07:04] fail2ban.DEBUG:    |- Currently banned:	5 [] []
[2023-10-30 19:07:04] fail2ban.DEBUG:    |- Total banned:	6 [] []
[2023-10-30 19:07:04] fail2ban.DEBUG:    `- Banned IP list:	147.161.233.96 216.218.206.66 92.184.96.209 146.70.18.124 146.70.18.123 [] []
[2023-10-30 19:07:04] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-badbots' [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: Status for the jail: apache-badbots [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-botsearch' [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: Status for the jail: apache-botsearch [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-noscript' [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: Status for the jail: apache-noscript [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-overflows' [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: Status for the jail: apache-overflows [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 19:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 19:07:05] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 19:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 19:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'sshd' [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: Status for the jail: sshd [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: |  `- File list:	/var/log/auth.log [] []
[2023-10-30 19:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 19:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 19:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 19:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 20:07:04] fail2ban.DEBUG: refreshAllJails of Fail2ban [] []
[2023-10-30 20:07:04] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-multiport' [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: Status for the jail: apache-multiport [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  |- Currently failed:	2 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  |- Total failed:	70 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    |- Currently banned:	5 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    |- Total banned:	7 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    `- Banned IP list:	147.161.233.96 216.218.206.66 92.184.96.209 146.70.18.124 146.70.18.123 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache' [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: Status for the jail: apache [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  |- Currently failed:	1 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  |- Total failed:	65 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    |- Currently banned:	5 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    |- Total banned:	6 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    `- Banned IP list:	147.161.233.96 216.218.206.66 92.184.96.209 146.70.18.124 146.70.18.123 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-badbots' [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: Status for the jail: apache-badbots [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 20:07:05] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 20:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-botsearch' [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: Status for the jail: apache-botsearch [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-noscript' [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: Status for the jail: apache-noscript [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-overflows' [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: Status for the jail: apache-overflows [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 20:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 20:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'sshd' [] []
[2023-10-30 20:07:07] fail2ban.DEBUG: Status for the jail: sshd [] []
[2023-10-30 20:07:07] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 20:07:07] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 20:07:07] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 20:07:07] fail2ban.DEBUG: |  `- File list:	/var/log/auth.log [] []
[2023-10-30 20:07:07] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 20:07:07] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 20:07:07] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 20:07:07] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: refreshAllJails of Fail2ban [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-multiport' [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: Status for the jail: apache-multiport [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |  |- Currently failed:	2 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |  |- Total failed:	70 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:05] fail2ban.DEBUG:    |- Currently banned:	5 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG:    |- Total banned:	7 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG:    `- Banned IP list:	147.161.233.96 216.218.206.66 92.184.96.209 146.70.18.124 146.70.18.123 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache' [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: Status for the jail: apache [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |  |- Total failed:	65 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:05] fail2ban.DEBUG:    |- Currently banned:	5 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG:    |- Total banned:	6 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG:    `- Banned IP list:	147.161.233.96 216.218.206.66 92.184.96.209 146.70.18.124 146.70.18.123 [] []
[2023-10-30 21:07:05] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-badbots' [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: Status for the jail: apache-badbots [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-botsearch' [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: Status for the jail: apache-botsearch [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-noscript' [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: Status for the jail: apache-noscript [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'apache-overflows' [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: Status for the jail: apache-overflows [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: |  `- File list:	/var/www/html/log/http.error [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 21:07:06] fail2ban.DEBUG:    `- Banned IP list: [] []
[2023-10-30 21:07:06] fail2ban.DEBUG: execute locally sudo fail2ban-client status 'sshd' [] []
[2023-10-30 21:07:07] fail2ban.DEBUG: Status for the jail: sshd [] []
[2023-10-30 21:07:07] fail2ban.DEBUG: |- Filter [] []
[2023-10-30 21:07:07] fail2ban.DEBUG: |  |- Currently failed:	0 [] []
[2023-10-30 21:07:07] fail2ban.DEBUG: |  |- Total failed:	0 [] []
[2023-10-30 21:07:07] fail2ban.DEBUG: |  `- File list:	/var/log/auth.log [] []
[2023-10-30 21:07:07] fail2ban.DEBUG: `- Actions [] []
[2023-10-30 21:07:07] fail2ban.DEBUG:    |- Currently banned:	0 [] []
[2023-10-30 21:07:07] fail2ban.DEBUG:    |- Total banned:	0 [] []
[2023-10-30 21:07:07] fail2ban.DEBUG:    `- Banned IP list: [] []
4

Désolé c’est pas lisible.
Il faut mettre les logs dans un Texte préformaté (bouton </>) et pas une

Citation

5

Est-ce mieux ?

6

Non comme tu peux voir :wink:
il faut reprendre le log brut car là c’est corrompu avec la citation

Il faut vraiment utiiser le bouton </>. Pas taper les caractères < ou > (voir derrière le bouton engrenage si tu ne le vois pas)

7

Ok compris, il faut faire apparaitre avec l’engrenage
Correction faites…c’est beaucoup plus lisible

8

Merci, je regarde demain je pense du coup

1 « J'aime »
9

Aucune urgence, prends le temps nécessaire

Accessoirement, je ne comprends pas pourquoi, depuis que j’ai corrigé les paramètres de fail2ban, je me fais ban lorsque je me connecte de l’extérieur en https.

10

Effectivement il y avait un bug, nouvelle version dispo.

Concernant ta dernière question, je ne sais pas dire évidement, ca dépende ce que tu as configuré :slight_smile:

11

Content de ma modeste contribution au debeugage

Concernant le « ban »
J’ai hier soir corrigé
ignoreip = 127.0.0.1/8 192.168.1.0/24 en ajoutant 192.168.0.0/24 10.0.0.0/8
suivant https://github.com/jeedom/core/blob/V4-stable/install/fail2ban.jeedom.conf

par contre je vois

#[apache-multiport] c’est contreversé, cela semble corrigé depuis que j’ai ajouté 192.168.0.0/24 10.0.0.0/8
[apache-botsearch]
[apache-overflows]
[apache-noscript]

et je ne vois aucune régle [apache] dans le GIT, et moi cette régle est activée, peux tu juste me dire si elle est nécessaire?

12

Je ne sais pas; elle fait quoi cette règle « apache »?

13

Là, mes compétences sont dépassées. De Google, je comprends que fail2ban surveille les erreurs des services, donc « apache » en l’occurrence.
Maintenant a savoir si c’est nécessaire de le surveiller pour jeedom …j’en sais rien

14

Je ne connais pas par cœur toutes les règles par défaut qui existent.
Je regarderai lorsque je serai sur ordi si tu veux

En tout cas chez moi elle est désactivée sur les installs jeedom

15

Merci, tous les signent tendent a ne pas l’activer, je vais corriger la config de fail2ban.

16

Ce sujet a été automatiquement fermé après 24 heures suivant le dernier commentaire. Aucune réponse n’est permise dorénavant.