mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
2f9e5fe1da
1. Clients or bots trying to access resources not being hosted to explore critical files. -> Error 404 is returned 2. Clients or bots trying to exploit services by pinging URIs with methods not allowed (i.e. POST instead of GET) -> Error 405 is returned 3. Clients or bots explore dynamic hosted sites by randomly sending parameters to exploit the API (for all APIs from old CGI to REST service proxied) -> Error 50x is returned The latter is the weekest criteria bc. the return code is at best a expected exception and then defined by the API designer or at worst depending on the system behind. CGI for example let nginx throw 519 on harsh errors (which is not covered by the regex at all) |
||
|---|---|---|
| .. | ||
| action.d | ||
| filter.d | ||
| fail2ban.conf | ||
| jail.conf | ||
| paths-arch.conf | ||
| paths-common.conf | ||
| paths-debian.conf | ||
| paths-fedora.conf | ||
| paths-freebsd.conf | ||
| paths-opensuse.conf | ||
| paths-osx.conf | ||