Commit b5c01eb5 authored by Vitaly Lipatov's avatar Vitaly Lipatov

add nginx to fail2ban

parent 75c84a81
# Fail2Ban configuration file
#
# Author: Vitaly Lipatov
#
# $Revision: 728 $
#
[Definition]
# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
# host must be matched by a group named "host". The tag "<HOST>" can
# be used for standard IP/hostname matching and is only an alias for
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
#
failregex = ^<HOST> - -
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
#ignoreregex =
172.245.118.144 - - [06/Jun/2015:16:36:28 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
216.158.207.192 - - [06/Jun/2015:16:36:29 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
172.245.118.144 - - [06/Jun/2015:16:36:29 +0300] "GET /index.php?option=com_user&view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=login" - "agro-seed.ru"
23.245.6.158 - - [06/Jun/2015:16:36:35 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=105644 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
23.245.6.158 - - [06/Jun/2015:16:36:36 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
107.172.3.6 - - [06/Jun/2015:16:36:49 +0300] "GET /component/users/?view=registration HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
107.172.3.6 - - [06/Jun/2015:16:36:49 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
107.172.3.6 - - [06/Jun/2015:16:36:50 +0300] "GET /index.php?option=com_user&view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=login" - "agro-seed.ru"
23.247.140.97 - - [06/Jun/2015:16:36:51 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=122258 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
139.0.110.64 - - [06/Jun/2015:16:36:51 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=131003 HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
139.0.110.64 - - [06/Jun/2015:16:36:59 +0300] "GET /index.php/component/users/?view=registration HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
198.50.183.200 - - [06/Jun/2015:16:37:00 +0300] "GET /?option=com_k2& HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
78.129.131.80 - - [06/Jun/2015:16:37:03 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=131734 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
78.129.131.80 - - [06/Jun/2015:16:37:04 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
78.129.131.80 - - [06/Jun/2015:16:37:05 +0300] "GET /index.php?option=com_user&view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=login" - "agro-seed.ru"
139.0.110.64 - - [06/Jun/2015:16:37:10 +0300] "GET /index.php?option=com_user&view=register HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=registration" - "agro-seed.ru"
139.194.103.80 - - [06/Jun/2015:16:37:11 +0300] "GET /index.php?option=com_user&view=register HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=registration" - "agro-seed.ru"
139.194.103.80 - - [06/Jun/2015:16:37:15 +0300] "GET /index.php/component/user/?task=register HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php?option=com_user&view=register" - "agro-seed.ru"
37.59.45.6 - - [06/Jun/2015:16:37:29 +0300] "GET /component/users/?view=registration HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
188.211.162.41 - - [06/Jun/2015:16:37:30 +0300] "GET /index.php/component/users/?view=login HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
188.211.162.41 - - [06/Jun/2015:16:37:30 +0300] "GET /index.php?option=com_user&view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=login" - "agro-seed.ru"
195.154.181.18 - - [06/Jun/2015:16:37:32 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=114050 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
195.154.181.18 - - [06/Jun/2015:16:37:43 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=111582 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
117.146.116.18 - - [06/Jun/2015:16:37:48 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=94625 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
62.210.11.159 - - [06/Jun/2015:16:37:57 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=121086 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
216.158.192.38 - - [06/Jun/2015:16:37:59 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=128911 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
216.158.192.38 - - [06/Jun/2015:16:37:59 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
87.242.64.179 - - [06/Jun/2015:16:38:03 +0300] "GET /?option=com_k2 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
188.134.31.34 - - [06/Jun/2015:16:38:03 +0300] "GET /?option%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D95386 HTTP/1.1" 501 180 from "http://agro-seed.ru/?option%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D95386" - "agro-seed.ru"
195.221.21.235 - - [06/Jun/2015:16:38:03 +0300] "GET /?option=com_k2 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
207.241.229.236 - - [06/Jun/2015:16:38:05 +0300] "GET /?option=com_k2 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
195.154.181.18 - - [06/Jun/2015:16:38:05 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=107128 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
188.134.31.34 - - [06/Jun/2015:16:38:06 +0300] "GET /?option%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D95386 HTTP/1.1" 501 180 from "http://agro-seed.ru/?option%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D95386" - "agro-seed.ru"
198.64.140.84 - - [06/Jun/2015:16:38:06 +0300] "GET /?option=com_k2 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
128.30.52.71 - - [06/Jun/2015:16:38:07 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=95386 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
23.250.11.122 - - [06/Jun/2015:16:38:08 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=37956 HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
62.149.141.208 - - [06/Jun/2015:16:38:09 +0300] "GET /?option=com_k2 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
162.243.227.92 - - [06/Jun/2015:16:38:11 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=95386 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
219.94.128.191 - - [06/Jun/2015:16:38:13 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=95386 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
198.64.140.84 - - [06/Jun/2015:16:38:14 +0300] "GET /?option=com_k2 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
188.134.31.34 - - [06/Jun/2015:16:38:14 +0300] "GET /?option%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D95386 HTTP/1.1" 501 180 from "http://agro-seed.ru/?option%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D95386" - "agro-seed.ru"
216.119.148.124 - - [06/Jun/2015:16:38:15 +0300] "HEAD /?option=com_k2&view=itemlist&task=user&id=95386 HTTP/1.1" 501 0 from "-" - "agro-seed.ru"
82.165.37.227 - - [06/Jun/2015:16:38:15 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=95386 HTTP/1.1" 501 180 from "-" - "agro-seed.ru"
94.23.251.97 - - [06/Jun/2015:16:38:15 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=95386 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
91.206.201.181 - - [06/Jun/2015:16:38:19 +0300] "GET /?option=com_k2 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
111.1.36.166 - - [06/Jun/2015:16:38:20 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=43578 HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
192.171.235.55 - - [06/Jun/2015:16:38:21 +0300] "GET /component/users/?view=registration&layout=complete HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
69.89.20.47 - - [06/Jun/2015:16:38:36 +0300] "GET /?option=com_k2 HTTP/1.1" 501 180 from "http://agro-seed.ru/?option=com_k2" - "agro-seed.ru"
173.234.169.150 - - [06/Jun/2015:16:38:37 +0300] "GET /component/users/?view=registration HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
173.234.169.150 - - [06/Jun/2015:16:38:37 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
172.245.122.67 - - [06/Jun/2015:16:38:47 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=85199 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
69.89.20.47 - - [06/Jun/2015:16:38:55 +0300] "GET /?option=com_k2 HTTP/1.1" 501 180 from "http://agro-seed.ru/?option=com_k2" - "agro-seed.ru"
155.254.203.163 - - [06/Jun/2015:16:38:57 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=125783 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
69.12.81.70 - - [06/Jun/2015:16:38:57 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=103411 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
195.154.232.42 - - [06/Jun/2015:16:38:58 +0300] "GET /component/users/?view=registration&layout=complete HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
37.59.45.6 - - [06/Jun/2015:16:39:08 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=1983 HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
45.59.186.89 - - [06/Jun/2015:16:39:16 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=66934 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
203.217.170.144 - - [06/Jun/2015:16:39:27 +0300] "GET /?option=com_k2& HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
116.50.25.181 - - [06/Jun/2015:16:39:32 +0300] "GET /index.php/component/users/?view=login HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
155.249.10.140 - - [06/Jun/2015:16:39:35 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=123417 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
104.218.197.209 - - [06/Jun/2015:16:39:36 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=118470 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
192.3.31.90 - - [06/Jun/2015:16:39:39 +0300] "GET /component/users/?view=registration&layout=complete HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
192.3.31.90 - - [06/Jun/2015:16:39:40 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
192.3.31.90 - - [06/Jun/2015:16:39:40 +0300] "GET /index.php?option=com_user&view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=login" - "agro-seed.ru"
216.158.196.61 - - [06/Jun/2015:16:39:43 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=105644 HTTP/1.0" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
216.158.196.61 - - [06/Jun/2015:16:39:44 +0300] "GET /index.php/component/users/?view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
116.50.25.181 - - [06/Jun/2015:16:39:51 +0300] "GET /index.php?option=com_user&view=login HTTP/1.1" 501 180 from "http://agro-seed.ru/index.php/component/users/?view=login" - "agro-seed.ru"
78.129.131.107 - - [06/Jun/2015:16:39:55 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=33128 HTTP/1.0" 501 180 from "-" - "agro-seed.ru"
186.17.144.86 - - [06/Jun/2015:16:39:56 +0300] "GET /index.php?option=com_users&task=registration.activate&token=b95918f7c11ea5b4bc634e770b43eafc HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
41.188.121.148 - - [06/Jun/2015:16:40:03 +0300] "GET /component/users/?view=registration&layout=complete HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
172.85.111.204 - - [06/Jun/2015:16:40:08 +0300] "GET /?option=com_k2&view=itemlist&task=user&id=23361 HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
41.188.118.190 - - [06/Jun/2015:16:40:13 +0300] "GET /component/users/?view=registration&layout=complete HTTP/1.1" 501 180 from "http://agro-seed.ru/" - "agro-seed.ru"
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment