Версии ПО

ОС: CentOS 7
phpMyAdmin: 4.7.4
php: 7.1.10

Образец лога

/var/log/secure


Oct 12 21:18:35 server phpMyAdmin[8350]: user denied: root (mysql-denied) from 163.172.115.77

Oct 12 21:18:35 server phpMyAdmin[8350]: user denied: root (mysql-denied) from 163.172.115.77

Фильтр

/etc/fail2ban/filter.d/phpmyadmin.conf


before = common.conf

[Definition]
_daemon = (?:phpMyAdmin)

failregex = ^%(__prefix_line)suser denied: .* \(mysql-denied\) from <HOST>$

before = common.conf

[Definition]

_daemon = (?:phpMyAdmin)

failregex = ^%(__prefix_line)suser denied: .* $mysql-denied$ from <HOST>$

jail.conf

/etc/fail2ban/jail.conf


[phpmyadmin]

enabled  = true
filter   = phpmyadmin
port     = https
action   = iptables[name=phpMyAdmin, port=http, protocol=tcp]
           sendmail-whois[name=phpMyAdmin, dest=you@email.com]
logpath  = /var/log/secure
findtime    = 3600
maxretry = 5
bantime  = 2592000

[phpmyadmin]

enabled = true

filter = phpmyadmin

port = https

action = iptables[name=phpMyAdmin, port=http, protocol=tcp]

sendmail-whois[name=phpMyAdmin, dest=you@email.com]

logpath = /var/log/secure

findtime = 3600

maxretry = 5

bantime = 2592000

2keep.net

IT-Blog

Fail2Ban фильтр для phpMyAdmin 4.7x (маленькая заметка)

Версии ПО

Образец лога

Фильтр

jail.conf

Похожие записи...

Андрей Торженов

Latest posts by Андрей Торженов (see all)

Добавить комментарий Отменить ответ