Re: fail2ban for apache2

[Gene Heskett <gheskett@shentel.net>]

On Sunday 10 November 2019 16:07:22 tomas@tuxteam.de wrote:

> On Sun, Nov 10, 2019 at 10:55:03AM -0500, Gene Heskett wrote:
> > On Sunday 10 November 2019 08:02:46 Michael wrote:
> >
> > Which contains such gems as this:
> > coyote.coyote.den:80 40.77.167.79 - -
> > [10/Nov/2019:10:44:45 -0500] "GET /gene/fence/18.html HTTP/1.1" 200
> > 1121 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X)
> > AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465
> > Safari/9537.53 (compatible; bingbot/2.0;
> > +http://www.bing.com/bingbot.htm)"
> >
> > But I've no clue which of the above blather is the "User agent"
> > [...]
>
> It's the sixth field:
>
I don't see an obvious field delimiter in this. Tomas. Is it definable?

>   "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X)
>   AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465
>   Safari/9537.53 (compatible; bingbot/2.0;
>   +http://www.bing.com/bingbot.htm)"
>
> Yes, a bit long. But focusing on the bingbot part seems reasonable.
>
> Cheers
> -- t
Thanks Tomas.


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>