[CentOS] semi OT: logwatch results
John Thomas
gmane-2006-04-16 at jt-socal.com
Sat Jul 19 02:56:56 UTC 2008
Robert - elists wrote:
> GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s)
> 404 1 responses
I installed fail2ban from rpmforge and created a filter that bans these
type of things.
Here is my novice attempt at the failregex =
<HOST> - - \[.*\] \"GET .*(azenv\.php|adxmlrpc\.php|xmlrpc\.php).*"
--
Sincerely,
John Thomas
More information about the CentOS
mailing list