Fail2ban 封禁了 47700 个IP！

IsaacZ

🛡️ Fail2ban 实时防护状态 - dianbo.org

https://www.dianbo.org/fail2banstatus.html

IsaacZ

目前主要攻击目标是 search.php 和 home.php


185.187.77.68 - - [28/Nov/2025:16:06:23 +0800] ＂GET /search.php?formhash=c59047b9&mod=forum&searchsubmit=true&source=hotsearch&srchtxt=nero HTTP/1.1＂ 503 3796 ＂-＂ ＂Opera/9.54.(X11; Linux i686; ne-NP) Presto/2.9.189 Version/12.00＂
175.110.166.22 - - [28/Nov/2025:16:06:23 +0800] ＂GET /search.php?formhash=08481b98&mod=forum&searchsubmit=true&source=hotsearch&srchtxt=TMPGEnc HTTP/1.1＂ 503 3797 ＂-＂ ＂Mozilla/5.0 (iPad; CPU iPad OS 3_2_2 like Mac OS X) AppleWebKit/535.0 (KHTML, like Gecko) FxiOS/14.8i4727.0 Mobile/15X659 Safari/535.0＂
160.250.83.129 - - [28/Nov/2025:16:06:24 +0800] ＂GET /search.php?mod=forum&srchtxt=%e9%bb%91%e8%be%b9&formhash=30c3daf6&searchsubmit=true&source=hotsearch HTTP/1.1＂ 503 3797 ＂-＂ ＂Mozilla/5.0 (X11; Linux i686) AppleWebKit/531.2 (KHTML, like Gecko) Chrome/55.0.892.0 Safari/531.2＂
109.107.231.125 - - [28/Nov/2025:16:06:25 +0800] ＂GET /search.php?formhash=dd6e2048&mod=forum&searchsubmit=true&source=hotsearch&srchtxt=%E5%85%89%E7%9B%98%E5%A4%8D%E5%88%B6 HTTP/1.1＂ 503 3798 ＂-＂ ＂Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.2; Trident/5.0)＂

罗永浩

尽量少用这些防御性质的软件，有时候不但拖累系统运行还有误封的情况，DZ本身够安全的了，设置好后台安全设置，账号问答登录、密码就可以了

babyfacer

注意哟，这个软件的日志要定期清理，不然超级大