[CentOS] semi OT: logwatch results

John Thomas gmane-2006-04-16 at jt-socal.com
Sat Jul 19 02:56:56 UTC 2008

Robert - elists wrote:
> GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s)
> 404 1 responses

I installed fail2ban from rpmforge and created a filter that bans these 
type of things.

Here is my novice attempt at the failregex =
<HOST> - - \[.*\] \"GET .*(azenv\.php|adxmlrpc\.php|xmlrpc\.php).*"

John Thomas

More information about the CentOS mailing list