Gecko [ newweb.supercareproducts.com ]

Name	Size	Permission	Date
ignorecommands	[ DIR ]	drwxr-xr-x	2026-04-22 20:14
3proxy.conf	467 B	-rw-r--r--	2023-04-01 14:40
apache-auth.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
apache-badbots.conf	2.76 KB	-rw-r--r--	2023-04-01 14:40
apache-botsearch.conf	1.24 KB	-rw-r--r--	2023-04-01 14:40
apache-common.conf	1.58 KB	-rw-r--r--	2023-04-01 14:40
apache-fakegooglebot.conf	403 B	-rw-r--r--	2023-04-01 14:40
apache-modsecurity.conf	511 B	-rw-r--r--	2023-04-01 14:40
apache-nohome.conf	596 B	-rw-r--r--	2023-04-01 14:40
apache-noscript.conf	1.22 KB	-rw-r--r--	2023-04-01 14:40
apache-overflows.conf	2.14 KB	-rw-r--r--	2023-04-01 14:40
apache-pass.conf	362 B	-rw-r--r--	2023-04-01 14:40
apache-shellshock.conf	1020 B	-rw-r--r--	2023-04-01 14:40
assp.conf	3.41 KB	-rw-r--r--	2023-04-01 14:40
asterisk.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
bitwarden.conf	427 B	-rw-r--r--	2023-04-01 14:40
botsearch-common.conf	522 B	-rw-r--r--	2023-04-01 14:40
centreon.conf	307 B	-rw-r--r--	2023-04-01 14:40
common.conf	2.71 KB	-rw-r--r--	2023-04-01 14:40
counter-strike.conf	244 B	-rw-r--r--	2023-04-01 14:40
courier-auth.conf	463 B	-rw-r--r--	2023-04-01 14:40
courier-smtp.conf	512 B	-rw-r--r--	2023-04-01 14:40
cyrus-imap.conf	444 B	-rw-r--r--	2023-04-01 14:40
directadmin.conf	338 B	-rw-r--r--	2023-04-01 14:40
domino-smtp.conf	2.06 KB	-rw-r--r--	2023-04-01 14:40
dovecot.conf	2.58 KB	-rw-r--r--	2023-04-01 14:40
dropbear.conf	1.69 KB	-rw-r--r--	2023-04-01 14:40
drupal-auth.conf	547 B	-rw-r--r--	2023-04-01 14:40
ejabberd-auth.conf	1.54 KB	-rw-r--r--	2023-04-01 14:40
exim-common.conf	534 B	-rw-r--r--	2023-04-01 14:40
exim-spam.conf	2.11 KB	-rw-r--r--	2023-04-01 14:40
exim.conf	2.81 KB	-rw-r--r--	2023-04-01 14:40
freeswitch.conf	1.88 KB	-rw-r--r--	2023-04-01 14:40
froxlor-auth.conf	1.18 KB	-rw-r--r--	2023-04-01 14:40
gitlab.conf	236 B	-rw-r--r--	2023-04-01 14:40
grafana.conf	388 B	-rw-r--r--	2023-04-01 14:40
groupoffice.conf	236 B	-rw-r--r--	2023-04-01 14:40
gssftpd.conf	322 B	-rw-r--r--	2023-04-01 14:40
guacamole.conf	1.41 KB	-rw-r--r--	2023-04-01 14:40
haproxy-http-auth.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
horde.conf	404 B	-rw-r--r--	2023-04-01 14:40
kerio.conf	938 B	-rw-r--r--	2023-04-01 14:40
lighttpd-auth.conf	459 B	-rw-r--r--	2023-04-01 14:40
mongodb-auth.conf	2.23 KB	-rw-r--r--	2023-04-01 14:40
monit.conf	787 B	-rw-r--r--	2023-04-01 14:40
monitorix.conf	640 B	-rw-r--r--	2023-04-01 14:40
mssql-auth.conf	441 B	-rw-r--r--	2023-04-01 14:40
murmur.conf	927 B	-rw-r--r--	2023-04-01 14:40
mysqld-auth.conf	953 B	-rw-r--r--	2023-04-01 14:40
nagios.conf	400 B	-rw-r--r--	2023-04-01 14:40
named-refused.conf	1.56 KB	-rw-r--r--	2023-04-01 14:40
nginx-bad-request.conf	474 B	-rw-r--r--	2023-04-01 14:40
nginx-botsearch.conf	740 B	-rw-r--r--	2023-04-01 14:40
nginx-http-auth.conf	1.02 KB	-rw-r--r--	2023-04-01 14:40
nginx-limit-req.conf	1.48 KB	-rw-r--r--	2023-04-01 14:40
nsd.conf	779 B	-rw-r--r--	2023-04-01 14:40
openhab.conf	452 B	-rw-r--r--	2023-04-01 14:40
openwebmail.conf	495 B	-rw-r--r--	2023-04-01 14:40
oracleims.conf	1.89 KB	-rw-r--r--	2023-04-01 14:40
pam-generic.conf	947 B	-rw-r--r--	2023-04-01 14:40
perdition.conf	568 B	-rw-r--r--	2023-04-01 14:40
php-url-fopen.conf	891 B	-rw-r--r--	2023-04-01 14:40
phpmyadmin-syslog.conf	278 B	-rw-r--r--	2023-04-01 14:40
portsentry.conf	242 B	-rw-r--r--	2023-04-01 14:40
postfix.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
proftpd.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
pure-ftpd.conf	2.35 KB	-rw-r--r--	2023-04-01 14:40
qmail.conf	795 B	-rw-r--r--	2023-04-01 14:40
recidive.conf	1.34 KB	-rw-r--r--	2023-04-01 14:40
roundcube-auth.conf	1.46 KB	-rw-r--r--	2023-04-01 14:40
scanlogd.conf	354 B	-rw-r--r--	2023-04-01 14:40
screensharingd.conf	821 B	-rw-r--r--	2023-04-01 14:40
selinux-common.conf	538 B	-rw-r--r--	2023-04-01 14:40
selinux-ssh.conf	570 B	-rw-r--r--	2023-04-01 14:40
sendmail-auth.conf	790 B	-rw-r--r--	2023-04-01 14:40
sendmail-reject.conf	2.9 KB	-rw-r--r--	2023-04-01 14:40
sieve.conf	371 B	-rw-r--r--	2023-04-01 14:40
slapd.conf	706 B	-rw-r--r--	2023-04-01 14:40
softethervpn.conf	451 B	-rw-r--r--	2023-04-01 14:40
sogo-auth.conf	722 B	-rw-r--r--	2023-04-01 14:40
solid-pop3d.conf	1.07 KB	-rw-r--r--	2023-04-01 14:40
squid.conf	260 B	-rw-r--r--	2023-04-01 14:40
squirrelmail.conf	191 B	-rw-r--r--	2023-04-01 14:40
sshd.conf	7.69 KB	-rw-r--r--	2023-04-01 14:40
stunnel.conf	363 B	-rw-r--r--	2023-04-01 14:40
suhosin.conf	649 B	-rw-r--r--	2023-04-01 14:40
tine20.conf	890 B	-rw-r--r--	2023-04-01 14:40
traefik-auth.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
uwimap-auth.conf	374 B	-rw-r--r--	2023-04-01 14:40
vsftpd.conf	637 B	-rw-r--r--	2023-04-01 14:40
webmin-auth.conf	444 B	-rw-r--r--	2023-04-01 14:40
wuftpd.conf	520 B	-rw-r--r--	2023-04-01 14:40
xinetd-fail.conf	521 B	-rw-r--r--	2023-04-01 14:40
znc-adminlog.conf	912 B	-rw-r--r--	2023-04-01 14:40
zoneminder.conf	1.12 KB	-rw-r--r--	2023-04-01 14:40

Rename

# Fail2Ban filter for dropbear
#
# NOTE: The regex below is ONLY intended to work with a patched
# version of Dropbear as described here:
# http://www.unchartedbackwaters.co.uk/pyblosxom/static/patches
#            ^%(__prefix_line)sexit before auth from <HOST>.*\s*$
#
# The standard Dropbear output doesn't provide enough information to
# ban all types of attack.  The Dropbear patch adds IP address
# information to the 'exit before auth' message which is always
# produced for any form of non-successful login. It is that message
# which this file matches.
#
# More information: http://bugs.debian.org/546913

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

_daemon = dropbear

prefregex = ^%(__prefix_line)s<F-CONTENT>(?:[Ll]ogin|[Bb]ad|[Ee]xit).+</F-CONTENT>$

failregex = ^[Ll]ogin attempt for nonexistent user ('.*' )?from <HOST>:\d+$
            ^[Bb]ad (PAM )?password attempt for .+ from <HOST>(:\d+)?$
            ^[Ee]xit before auth $user '.+', \d+ fails$: Max auth tries reached - user '.+' from <HOST>:\d+\s*$

ignoreregex =

# DEV Notes:
#
# The first two regexs here match the unmodified dropbear messages. It isn't
# possible to match the source of the 'exit before auth' messages from dropbear
# as they don't include the "from <HOST>" bit.
#
# The second last failregex line we need to match with the modified dropbear.
#
# For the second regex the following apply:
#
# http://www.netmite.com/android/mydroid/external/dropbear/svr-authpam.c
# http://svn.dd-wrt.com/changeset/16642#file64
#
# http://svn.dd-wrt.com/changeset/16642/src/router/dropbear/svr-authpasswd.c
#
# Author: Francis Russell
#         Zak B. Elep