Redis/redis
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Print IP and port on Possible SECURITY ATTACK detected (#12024)

Browse Source 
Add a print statement to indicate which IP/port is sending the attack. So that the offending connection can be tracked
down, if necessary.
This commit is contained in:
Binbin
2023-04-12 18:23:00 -07:00
committed by GitHub
parent 810ea67b5b
commit f3e16a1a1e
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/networking.c
+7 -1
View File
@@ -3615,7 +3615,13 @@ void securityWarningCommand(client *c) {
time_t now = time(NULL);
if (llabs(now-logged_time) > 60) {
serverLog(LL_WARNING,"Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.");
char ip[NET_IP_STR_LEN];
int port;
if (connAddrPeerName(c->conn, ip, sizeof(ip), &port) == -1) {
serverLog(LL_WARNING,"Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.");
} else {
serverLog(LL_WARNING,"Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection from %s:%d aborted.", ip, port);
}
logged_time = now;
}
freeClientAsync(c);