Skip to content

Instantly share code, notes, and snippets.

@thiagotalma

thiagotalma/web-zerokiddies.conf

Last active August 29, 2015 14:15
Show Gist options
  • Save thiagotalma/9a25e91a384861376b00 to your computer and use it in GitHub Desktop.
Save thiagotalma/9a25e91a384861376b00 to your computer and use it in GitHub Desktop.
Download ZIP
fail2ban filters
Raw
web-zerokiddies.conf
# Fail2Ban Configuration File
#
# web-zerokiddies.conf
#
# Author: Thiago Talma
# Revision: 2015-02-13
[Definition]
badurls = admin|fck|sql|webdb|wp-login\.php|soap|manager|setup|pma|status|readme|dl-skin|download\.php|info\.php|\.\.\/|changelog\.txt
failregex = ^(?i)(.*:\d+ )?<HOST> .* "(GET|POST|HEAD) .*(%(badurls)s).* HTTP.*" (403|404) .*$
^(?i)(.*:\d+ )?<HOST> .* "(GET|POST|HEAD) / HTTP.*" (403|404) .*$
ignoreregex =
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment