Add webpath-abuse filter.

2026-10-27 01:10:26 +01:00
parent 11d31d8638
commit 61d20f6ffa
2 changed files with 16 additions and 0 deletions
@@ -0,0 +1,3 @@
+[Definition]
+failregex = ^<HOST> .*(GET|POST) (/classwithtostring\.php|/this_is_a_new_hello_world\.php|/cgi-bin/.*|/v./graphi?ql|/this_is_a_new_hello_world\.php|/graphql$|/alfacgiapi/.*|/\.env[\._](bak|old)|/fileadmin.*|//?xmlrpc\.php.*|/wp-admin/.*|/wp-content/plugins/.*|/wp-includes/.*|/wp-login.php|/wordpress/.*|/wp/.*|.*/wlwmanifest\.xml|/makeasmtp\.php) HTTP.*
+ignoreregex =
@@ -188,3 +188,16 @@ maxretry = 5
 findtime = 600
 bantime  = 10800
 port = http,https
+
+
+[webpath-abuse]
+
+enabled = true
+port    = http,https
+filter  = webpath-abuse
+logpath = /var/log/apache2/ip_requests.log
+maxretry = 4
+findtime = 3600
+bantime = 3600
+#ignoreip = 127.0.0.1 ::1 203.0.113.42
+#backend = auto