-
-
Notifications
You must be signed in to change notification settings - Fork 365
New to IPBan (?? on 404) #294
Replies: 5 comments · 5 replies
-
Make new log file entry if you want to change attempts for just 404 |
Beta Was this translation helpful? Give feedback.
All reactions
-
I think I tried that. I cloned the one for Apache, made a new regex for just 404, and set the limit to 10 events. Then the console kept looping this. 2024-03-04 08:33:45.4580|INFO|IPBan|Log file options changed for path/mask D:/XAMPP/apache/logs/access.log |
Beta Was this translation helpful? Give feedback.
All reactions
-
Post your full LogFile entry |
Beta Was this translation helpful? Give feedback.
All reactions
-
2024-03-04 07:38:05.3382|WARN|IPBan|Initializing service |
Beta Was this translation helpful? Give feedback.
All reactions
-
From the config I mean |
Beta Was this translation helpful? Give feedback.
All reactions
-
|
Beta Was this translation helpful? Give feedback.
All reactions
-
PathAndMask must be unique between all entries. So this isn't going to work. I'll have to think about allowing a way to provide different thresholds for the same path and different regex. I could insitutde an optional "Key" property, where if lacking, it falls back to PathAndMask. |
Beta Was this translation helpful? Give feedback.
All reactions
-
Humm what If i "tricked it" by adding a wildcard?
|
Beta Was this translation helpful? Give feedback.
All reactions
-
Worth a try! Let me know if it works. |
Beta Was this translation helpful? Give feedback.
All reactions
-
Well, seems to not be looping. Just have to wait and see if it catches next event(s). |
Beta Was this translation helpful? Give feedback.
-
I have IPBan setup and seems to be working. However, I would like the ability to catch bulk 404 failures. It seems that is the prevalent tactic used to find vulnerabilities on the server. As is, the 0 for failed logins is fine, but I want to add 404 catching but have it trigger only after say 10 hits. Is this possible? do I need a second group for the same log? Thanks.
Beta Was this translation helpful? Give feedback.
All reactions