[thw]

By the way gehe ich dann auch mal diesen Badbots Suchmaschinen an, die nerven...

...
2019-10-28 16:08:39,761 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.148.184
2019-10-28 16:08:49,797 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.149.62
2019-10-28 16:09:03,059 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.150.157
2019-10-28 16:09:08,286 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.150.5
2019-10-28 16:09:10,513 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.148.54
2019-10-28 16:09:21,147 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.149.106
2019-10-28 16:10:11,839 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 46.229.168.145
2019-10-28 16:10:13,863 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 46.229.168.137
2019-10-28 16:10:15,091 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 46.229.168.162
2019-10-28 16:10:18,314 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 216.244.66.227
2019-10-28 16:10:30,950 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.150.102
2019-10-28 16:10:41,184 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.148.128
2019-10-28 16:10:43,209 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.148.168
2019-10-28 16:10:56,451 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.150.133
2019-10-28 16:11:00,681 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 46.229.168.140
2019-10-28 16:11:14,918 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.150.124
2019-10-28 16:11:22,956 fail2ban.actions [88228]: NOTICE [apache-badbots] Ban 54.36.148.109
...

srv:/etc/fail2ban # grep apache-badbots /var/log/fail2ban.log | grep Ban| wc -l
45

Pro 5-10min. kommt einer dazu.. und wird geblockt..

srv:/etc/fail2ban # grep apache-badbots /var/log/fail2ban.log | grep Ban| wc -l
48

Nicht mit uns...

srv:/etc/fail2ban # grep apache-badbots /var/log/fail2ban.log | grep Ban| wc -l
54

Diese Regel werde ich noch bei einigen anderen Servern bei uns einbauen, in der Summe wird das Zentral gesammelt und diese erfassten IPs direkt bei unseren Firmen Firewalls gleich am Eingang geblockt.

srv:/etc/fail2ban # grep apache-badbots /var/log/fail2ban.log | grep Ban| wc -l
67


etc. etc...