Drupal dblog

premierhosting · **Joined:** Wed Aug 04, 2010 2:52 pm **Posts:** 257

Monitor drupal's dblog for crawler access patterns. Perhaps it's all happening in log monitoring as it is, but it might help.

mikeshinn · **Posted:** Tue Apr 19, 2011 10:04 am

Can you expand on this a little? What you like to monitor for, and what would the action be?

premierhosting · **Joined:** Wed Aug 04, 2010 2:52 pm **Posts:** 257

For example, you can watch the dblog and see the accesses from scanners looking for vulnerable scripts. Might be a good way to blacklist evils.

mikeshinn · **Posted:** Tue Apr 19, 2011 3:57 pm

Quote:

For example, you can watch the dblog and see the accesses from scanners looking for vulnerable scripts. Might be a good way to blacklist evils.

OK, I understand now. There are rules in modsecurity to detect and stop things like that, do you have specific examples that are not being blocked?

premierhosting · **Joined:** Wed Aug 04, 2010 2:52 pm **Posts:** 257

Not that I know of. Sound like its being covered.

mikeshinn · **Posted:** Tue Apr 19, 2011 6:03 pm

Should be, but we're only human so if you find anything we are missing please let us know. We'll get right on it.

premierhosting · **Joined:** Wed Aug 04, 2010 2:52 pm **Posts:** 257

You're doing great.