Hello All,
I added the xmlrpc filter and it looks like it's not catching anything.
I verified that jail is running.
When someone starts hitting the server and NOT failing, meaning that site
has wordpress, it doesn't block them when they do it too many times.
Even lowered the number maxretry to 3.
Then I took the site offline ( leaving all others running ) and forced the
attacker to get an error and it shows up in error_log, without blocking a
single one...
Any help appreciated !
Here is a sample:
[Mon Jan 19 17:58:30 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:30 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:30 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:30 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:33 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:33 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:33 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:33 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:34 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:34 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:35 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:35 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:35 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:35 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:35 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:36 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:37 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:38 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:40 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:42 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:42 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:42 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:42 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:43 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:43 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:43 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:43 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:43 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:44 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:44 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:44 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:45 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:46 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:46 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:47 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:47 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:48 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:49 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:50 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:53 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:54 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:58 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:58:59 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:00 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:01 2015] [error] [client 198.12.95.74] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:01 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:01 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:01 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:01 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:02 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:02 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:03 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
[Mon Jan 19 17:59:03 2015] [error] [client 192.3.207.226] script '/home/
server.mysite.com/www/xmlrpc.php' not found or unable to stat
--
Thanks!
Joey
------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
