URL's probing on my server

Support for security such as Firewalls and securing linux
Post Reply
rob_imp
Posts: 3
Joined: 2019/01/30 10:05:36

URL's probing on my server

Post by rob_imp » 2019/01/30 10:10:53

Hi guys,

Is it possible to count number of attempts and then blick IP in case if from this address someone was probing multiple filenames (404)
which is suggesting someone is trying to find a way to break in. It ended up with 404'a but it is annoying and slowing down my system.
So something like if there is a request from certain ip and number of 404 is higher than ..... block ip or at least sending up an email to let me know that there is something going on and then I can make a decision what to do with it ?

regards
Rob

User avatar
TrevorH
Forum Moderator
Posts: 29120
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: URL's probing on my server

Post by TrevorH » 2019/01/30 10:53:18

Sounds like a job for fail2ban to me.
CentOS 6 will die in November 2020 - migrate sooner rather than later!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

rob_imp
Posts: 3
Joined: 2019/01/30 10:05:36

Re: URL's probing on my server

Post by rob_imp » 2019/01/30 11:09:24

Hello TrevorH,

I've never used fail2ban to sort it out would you provide some example or eventually some personal experience in this matter please

User avatar
TrevorH
Forum Moderator
Posts: 29120
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: URL's probing on my server

Post by TrevorH » 2019/01/30 16:52:25

Not me, I've never used it but I know what it does. It searches log files for patterns that match and then takes action depending on those. Usually used for banning offending ip addresses via iptables for skript kiddies trying to break into a system via ssh or http.
CentOS 6 will die in November 2020 - migrate sooner rather than later!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

rob_imp
Posts: 3
Joined: 2019/01/30 10:05:36

Re: URL's probing on my server

Post by rob_imp » 2019/01/30 17:37:58

Oh well, but at least I have some idea how to :P Thanx Trevor

Post Reply

Return to “CentOS 7 - Security Support”