| Server IP : 104.21.21.239 / Your IP : 216.73.216.101 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/fail2ban/server/__pycache__/ |
Upload File : |
a
=�*f�D � @ s� d Z dZdZddlZddlmZ ddlmZ ddlZddl Z ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlZdd lmZ dd
lmZ dd lmZ ee�ZG d d
� d
e�ZG dd� d�Ze� ZdS )zSerg G. Brester (sebres)z"Copyright (c) 2014 Serg G. BresterZGPL� N� )�
JailThread)�FailManagerEmpty� )� getLogger)�MyTime)�Utilsc sN e Zd ZdZejd Z� fdd�Zdd� Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� ZdGd$d%�Z� fd&d'�ZdHd*d+�Zed,d-� �ZdId.d/�ZdJd0d1�Z ed2d3� �Z e j d4d3� �Z ed5d6� �Z d7d8� Z d9d:� Z!d;d<� Z"G d=d>� d>�Z#d?d@� Z$dAdB� Z%dCdD� Z&dEdF� Z'� Z(S )K�ObserverThreada8 Handles observing a database, managing bad ips and ban increment.
Parameters
----------
Attributes
----------
daemon
ident
name
status
active : bool
Control the state of the thread.
idle : bool
Control the idle state of the thread.
sleeptime : int
The time the thread sleeps for in the loop.
�
c sZ t t| �jdd� d| _t�� | _g | _t�� | _ d| _
i | _ d| _ d | _
d| _d| _d S )Nz f2b/observer)�nameT�< Fi )�superr �__init__�idle� threading�RLock� _queue_lock�_queueZEvent�_notify� sleeptime�_timers�_paused�_ObserverThread__db�"_ObserverThread__db_purge_intervalZdaemon��self�� __class__� �</usr/lib/python3.9/site-packages/fail2ban/server/observer.pyr ? s
zObserverThread.__init__c C s0 z | j | W S ty* td| ��Y n0 d S )NzInvalid event index : %s�r �KeyError�r �ir r r � __getitem__T s zObserverThread.__getitem__c C s0 z | j |= W n ty* td| ��Y n0 d S )NzInvalid event index: %sr r" r r r � __delitem__Z s zObserverThread.__delitem__c C s
t | j�S �N)�iterr r r r r �__iter__` s zObserverThread.__iter__c C s
t | j�S r& )�lenr r r r r �__len__c s zObserverThread.__len__c C s dS )NFr )r �otherr r r �__eq__f s zObserverThread.__eq__c C s t | �S r& )�idr r r r �__hash__i s zObserverThread.__hash__c G sD | j �|d�}|dur |�� t�|| j|�}|| j |< |�� dS )z�Add a named timer event to queue will start (and wake) in 'starttime' seconds
Previous timer event with same name will be canceled and trigger self into
queue after new 'starttime' value
N)r �getZcancelr �Timer�add�start)r r � starttime�event�tr r r �add_named_timerl s
z ObserverThread.add_named_timerc G s^ t jdurB|rBt�tj| jt �� | t�� | |f�}|�� dS t�|| j |�}|�� dS )zJAdd a timer event to queue will start (and wake) in 'starttime' seconds
N)
r ZmyTimer r0 r �DEFAULT_SLEEP_INTERVAL�
_delayedEvent�timer2 r1 )r r3 r4 r5 r r r � add_timery s �zObserverThread.add_timerc C sR t �� |kst�� |kr.| jdg|�R � d S t�tj| j|||f�}|�� d S )Nr ) r r9 r: r r0 r r7 r8 r2 )r Z endMyTimeZendTimer4 r5 r r r r8 � s �z ObserverThread._delayedEventc C s | j s| j}|r|�� dS )z1Notify wakeup (sets /and resets/ notify event)
N)r r �set)r �nr r r � pulse_notify� s zObserverThread.pulse_notifyc G s> | j � | j�|� W d � n1 s(0 Y | �� dS )z5Add a event to queue and notify thread to wake up.
N)r r �appendr= �r r4 r r r r1 � s *zObserverThread.addc G s6 | j � | j�|� W d � n1 s(0 Y dS )z<Add a event to queue without notifying thread to wake up.
N)r r r> r? r r r �add_wn� s zObserverThread.add_wnc G s ||� d S r& r )r �l�argsr r r � call_lambda� s zObserverThread.call_lambdac
C s t �d� | �d| jd� | j| j| j| j| j| j | j
dd� dd� d� }�zJ| � d� | j �rzd | _
| j�s0z�d
}| j�& t| j�r�| j�d �}W d
� n1 s�0 Y |d
u r�W �q0|d }t|d �s�|�|�p�t| |�}||d d
� � W qd t�y, } z t jd
|dd� W Y d
}~qdd
}~0 0 qd| j}|�rbd| _
|�| j� |�� | j�rxqVqVt � t j � | j sV�qzqVt �dt| j�� d
| _W n6 t�y� } z t jd|dd� W Y d
}~n
d
}~0 0 | j� g | _W d
� n1 �s�0 Y d| _
dS )z�Main loop for Threading.
This function is the main loop of the thread.
Returns
-------
bool
True when the thread exits nicely.
zObserver start...�DB_PURGE�db_purgec S s dS �Nr r r r r r �<lambda>� � z$ObserverThread.run.<locals>.<lambda>c S s dS rF r r r r r rG � rH ) Zcall�db_setrE �is_aliveZ is_activer2 �stop�nop�shutdownrJ FNr r �%sT��exc_infoz&Observer stopped, %s events remaining.z Observer stopped after error: %s)!�logSys�infor6 r rC rI rE �isAlive�isActiver2 rK r1 �activer r r r) r �pop�callabler/ �getattr� Exception�errorr �waitr �clearr9 �sleepr r7 �is_full)r Z_ObserverThread__methZevZmeth�er< r r r �run� s^
�
* (
&&zObserverThread.runc C s dS )NTr r r r r rS � s zObserverThread.isAliveNc C s | j S r& )rU )r ZfromStrr r r rT s zObserverThread.isActivec s> | j �$ | js tt| ��� W d � n1 s00 Y d S r& )r rU r
r r2 r r r r r2 s zObserverThread.start� Tc C s� | j r�| jr�t�d|� | j�0 | �d� | j}| j�� d | _W d � n1 sT0 Y | �|�sl|r�|�� d| _ d| _ d | _
n|| _| � t |d��o�| j
S dS )Nz-Observer stop ... try to end queue %s secondsrM FTg �?)rU r rQ rR r r@ r; �
wait_emptyr\ r r � wait_idle�minr^ )r ZwtimeZ forceQuitr< r r r rK s
$zObserverThread.stopc C s< | j �" t| j�rdndW d � S 1 s.0 Y d S )NTF)r r) r r r r r r^ # s zObserverThread.is_fullc C s� t �tj� |dur t� � | }| jdurH| �d� | jrH| jrH| � � | jrr|durdt� � |krdqrt �tj� qH| �
d� | j S )zWWait observer is running and returns if observer has no more events (queue is empty)
NrL g����MbP?) r9 r] r r7 r r r@ r^ r r= rc �r r r_ r r r rb ( s
zObserverThread.wait_emptyc C sZ t �tj� | jrdS |dur*t� � | }| jsT|durFt� � |krFqTt �tj� q*| jS )zJWait observer is running and returns if observer idle (observer sleeps)
TN)r9 r] r r7 r r re r r r rc < s zObserverThread.wait_idlec C s | j S r& )r r r r r �pausedJ s zObserverThread.pausedc C s | j |krd S || _ | �� d S r& )r r= )r �pauser r r rf N s
c C s dS )z/Status of observer to be implemented. [TODO]
)� rh r r r r r �statusW s zObserverThread.statusc C s
|| _ d S r& )r )r �dbr r r rI a s zObserverThread.db_setc C s2 t �d� | jd ur | j�� | �d| jd� d S )Nz Purge database event occurredrD rE )rQ �debugr �purger6 r r r r r rE d s
zObserverThread.db_purgec
C s� |� � r|�d�sdS |�� }|�� }t�d|j|� d}d}d}�z|jj� � }|j
} | dur�| � ||�D ]8\}}}
t ||�
� �}d|dk r�|nd> d d } q�qlt||�}|dur�||kr�t�d|j|||� W dS |dkr�W dS t�d |j|t�|�||||k�rd
nd � |jj�||d d �}|�|� ||k�rJ|j�|� W n@ t�y� } z&tjd
| t�� tjkd� W Y d} ~ n
d} ~ 0 0 dS )z} Notify observer a failure for ip was found
Observer will check ip was known (bad) and possibly increase an retry count
� incrementNz [%s] Observer: failure found %sr r � r z8[%s] Ignore failure %s before last ban %s < %s, restoredz%[%s] Found %s, bad - %s, %s # -> %s%sz, Banrh TrN rO )rS �getBanTimeExtra�getID�getTimerQ rk r �filterZ failManagerZ getMaxRetry�database�getBan�max� getBanCountrd rR r �time2strZ
addFailure� setBanCountZ
performBanrY rZ �getEffectiveLevel�logging�DEBUG) r �jail�ticket�ipZunixTime�banCountZ
retryCount� timeOfBanZmaxRetryrj � lastBanTimer_ r r r � failureFoundo sD
� �
zObserverThread.failureFoundc @ s e Zd Zdd� ZdS )zObserverThread.BanTimeIncrc C s || _ || _d S r& )ZTimeZCount)r �banTimer r r r r � s z#ObserverThread.BanTimeIncr.__init__N��__name__�
__module__� __qualname__r r r r r � BanTimeIncr� s r� c C s |� � }|d | �||��S )N� evformula)ro r� )r r| r� r �ber r r � calcBanTime� s zObserverThread.calcBanTimec C s@ |� � r|js|S |�� }|�� }|}z�|dkr�|�dd�r�|jj|||�dd�d�D ]�\}}} ||�� krz|�|d � t� d|||� |dkr�|d | �
||��}|� |� |� � |kr�t�
d |j||t�|�t�|�t�|�f � nd
|_ q�qVW n@ t�y: }
z&tjd |
t�� tjkd � W Y d
}
~
n
d
}
~
0 0 |S )ztCheck for IP address to increment ban time (if was already banned).
Returns
-------
float
new ban time.
r rm F� overalljails)r� r z"IP %s was already banned: %s #, %sr� z/[%s] IP %s is bad: %s # last %s - incr %s to %sTrN rO N)rS rs ro rp r/ rt rv rx rQ rk r� �
setBanTimerq rR r r rw � seconds2str�restoredrY rZ ry rz r{ ) r r| r� r} r� r~ Z
orgBanTimer r� r� r_ r r r � incrBanTime� s2 �
�
0zObserverThread.incrBanTimec
C s� |j r
dS �z6|}|�� }t�d|j||� |dkrh|�� du rh| �|||�}|dks^||krh|�|� |dkr�|�� | }t �
|�t � |�f}|t � � k r�t�d|d � W dS nd}||k�r tj
d|j||�� g|�R � t�d d
|j|||f� | �td td || d ��| j||� |jdu�r@|j �s@|j�||� W n@ t�y� } z&tjd
|t�� tjkd� W Y d}~n
d}~0 0 dS )�� Notify observer a ban occurred for ip
Observer will check ip was known (bad) and possibly increase/prolong a ban time
Secondary we will actualize the bans and bips (bad ip) in database
Nz [%s] Observer: ban found %s, %s���zIgnore old bantime %sr F)Z permanentZinfinitez$[%s] Increase Ban %s (%d # %s -> %s)ra z [%s] Observer: prolong %s in %sr
r rN rO )r� rp rQ rk r �
getBanTimer� r� rq r r� rw r9 Znoticerv �logr: rd ru �
prolongBanrs ZaddBanrY rZ ry rz r{ ) r r} r| �btimeZoldbtimer~ ZbendtimeZlogtimer_ r r r �banFound� s:
��&zObserverThread.banFoundc
C sv z2|� � }|�� }t�d|j||� |j�|� W n> typ } z&tjd|t� � t
j kd� W Y d}~n
d}~0 0 dS )r� z [%s] Observer: prolong %s, %srN rO N) r� rp rQ rk r ZactionsZ _prolongBanrY rZ ry rz r{ )r r} r| r� r~ r_ r r r r� � s zObserverThread.prolongBan)N)ra T)N)N))r� r� r� �__doc__r r7 r r$ r% r( r* r, r. r6 r: r8 r= r1 r@ rC r` rS rT r2 rK �propertyr^ rb rc rf �setterri rI rE r� r� r� r� r� r� �
__classcell__r r r r r ( sN
P
2)*r c @ s e Zd Zdd� ZdS )�
_Observersc C s
d | _ d S r& )ZMainr r r r r s z_Observers.__init__Nr� r r r r r�
s r� )�
__author__Z
__copyright__Z __license__r Z
jailthreadr Z failmanagerr �osrz r9 ZdatetimeZmathZjsonZrandom�sysZhelpersr Zmytimer Zutilsr r� rQ r r� Z Observersr r r r �<module> s" 8 h