bunkerity / bunkerweb-plugins

Official plugins for BunkerWeb.
https://docs.bunkerweb.io/latest/plugins/
GNU Affero General Public License v3.0
28 stars 13 forks source link

cscli decision list no bad ip #16

Closed andyoulovexy closed 7 months ago

andyoulovexy commented 1 year ago

I use nikto test my website ,crowdsec logs show nikto server ip ,but cscli decision list havn't,bwcli bans had it image

crowdsec log: time="24-05-2023 10:22:54" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:22:54" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:22:54 UTC] \"GET /v1/decisions?ip=172.96.188.138 HTTP/1.1 403 4.831249ms \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:22:54" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:22:54" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:22:54 UTC] \"GET /v1/decisions?ip=172.96.188.138 HTTP/1.1 403 1.003643ms \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:22:57" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:22:57" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:22:57 UTC] \"GET /v1/decisions?ip=172.96.188.138 HTTP/1.1 403 772.089?s \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:22:58" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:22:58" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:22:58 UTC] \"GET /v1/decisions?ip=172.96.188.138 HTTP/1.1 403 678.359?s \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:22:59" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:22:59" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:22:59 UTC] \"GET /v1/decisions?ip=x.x.x.x HTTP/1.1 403 730.18?s \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:23:01" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:23:01" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:23:01 UTC] \"GET /v1/decisions?ip=x.x.x.x HTTP/1.1 403 682.316?s \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:23:02" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:23:02" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:23:02 UTC] \"GET /v1/decisions?ip=x.x.x.x HTTP/1.1 403 1.24194ms \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:23:03" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:23:03" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:23:03 UTC] \"GET /v1/decisions?ip=x.x.x.x HTTP/1.1 403 752.75?s \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:23:04" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:23:04" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:23:04 UTC] \"GET /v1/decisions?ip=x.x.x.x HTTP/1.1 403 777.849?s \"crowdsec-bunkerweb-bouncer/v0.1\" \"" time="24-05-2023 10:23:05" level=error msg="while fetching bouncer info: select bouncer: ent: bouncer not found: unable to query" ip=10.10.0.1 time="24-05-2023 10:23:05" level=info msg="10.10.0.1 - [Wed, 24 May 2023 10:23:05 UTC] \"GET /v1/decisions?ip=x.x.x.x HTTP/1.1 403 708.404?s \"crowdsec-bunkerweb-bouncer/v0.1\" \""

TheophileDiot commented 1 year ago

Hi @andyoulovexy, thank you for opening this issue, I'll have a look at it and let you know

fl0ppy-d1sk commented 1 year ago

Hello @andyoulovexy,

Can you give us more info please ? config, compose file, ...

Looks like CS API refuses to process the query (403 errors).

fl0ppy-d1sk commented 7 months ago

We improved the CS plugin a lot since the opening of this issue. Closing this as it should be resolved now.