Crowdsec quick CLI HTTP test

Add scenario http-dos-switching-ua Create bash script on client side “/usr/local/bin/crowdsecUAtest.sh” Turn on the executable bit Try Alternative:

28/03/2024   Crowdsec

BAD crawler / scraper ip address blacklist

IPv4 blacklist http-dos related activity, bad bot, fast user agent switching. Not included: italian IP address, googlebot.com, yandex.ru,baidu.com,yahoo.net,amazon,cloudflare https://www.texilee.it/bad-crawler-scraper-ip-address-blacklist

20/02/2024   blacklist, DDOS, ipset

body / header rules spamassassin

/etc/spamassassin/local.cf header LOCAL_ET_PHISHINGIe ALL =~ /(Antonio Balajadia|gocompany.top>|godatastamp.top|expresscourier.icu)/iscore LOCAL_ET_PHISHINGIe 20.1 body LOCAL_ET_URL_RULEea /(Password\ archivio|equipamentosmix|daprofesional.com|cse-engineer.com|psyberhawk.com|muebleslostroncos.cl)/iscore LOCAL_ET_URL_RULEea 20.1

03/11/2020   Spamassassin

Spamassassin channel

/etc/cron.hourly/sa-update sa-update –nogpg –channel updates.spamassassin.org retval=”$?” if [ $retval -eq 0 ]; then compile=1; fi sa-update –nogpg –channel spamassassin.heinlein-support.de retval=”$?” if [ $retval -eq 0 ]; then compile=1; fi sa-update –nogpg –channel sa.schaal-it.net retval=”$?” if [ $retval -eq 0 ]; then compile=1; fi

03/11/2020   Spamassassin

Fail2Ban Whitelist Cloudflare IP

edit /etc/fail2ban/jail.conf “ignoreip” can be an IP address, a CIDR mask or a DNS host. Fail2ban will not ban a host which matches an address in this list. Several addresses can be defined using space separator. ignoreip = 127.0.0.1/8 173.245.48.0/20 103.21.244.0/22 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 188.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/12 172.64.0.0/13 131.0.72.0/22

03/11/2020   Linux

Change default php version Ubuntu/Debian

update-alternatives –set php /usr/bin/php7.Xupdate-alternatives –set phar /usr/bin/phar7.Xupdate-alternatives –set phar.phar /usr/bin/phar.phar7.Xupdate-alternatives –set phpize /usr/bin/phpize7.Xupdate-alternatives –set php-config /usr/bin/php-config7.X

03/11/2020   Linux, Php