[GH-ISSUE #120] 1.5.12 crowdsec errors #19

New issue

Closed

opened 2026-03-02 02:59:25 +03:00 by kerem · 1 comment

kerem commented

2026-03-02 02:59:25 +03:00

Owner

Originally created by @celevra on GitHub (Jan 14, 2025).
Original GitHub issue: https://github.com/bunkerity/bunkerweb-plugins/issues/120

Hi,

with the newest version of bunkerweb (updated from 1.5.8) and the neweset plugin pack 1.6 i got following crowdsec errors:

bunker-bunkerweb-1     | xxx 116.203.156.79 - - [14/Jan/2025:07:17:56 +0000] "POST /yG9b4e9NUC/plugins/crowdsec?ping=true HTTP/2.0" 200 50 "https://wlb01.srvz.it/yG9b4e9NUC/plugins/crowdsec" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
bunker-bunkerweb-1     | 2025/01/14 07:17:56 [error] 301#301: *319 [lua] bouncer.lua:578: AppSecCheck(): Fallback because of err: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx"
bunker-bunkerweb-1     | 2025/01/14 07:17:56 [error] 301#301: *319 [lua] bouncer.lua:651: cs_allow(): AppSec check: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx"
bunker-bunkerweb-1     | www.xxxx 185.93.119.192 - - [14/Jan/2025:07:17:56 +0000] "GET /wpad.dat HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
bunker-bunkerweb-1     | 2025/01/14 07:17:56 [error] 301#301: *318 [lua] bouncer.lua:578: AppSecCheck(): Fallback because of err: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx"
bunker-bunkerweb-1     | 2025/01/14 07:17:56 [error] 301#301: *318 [lua] bouncer.lua:651: cs_allow(): AppSec check: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx"
bunker-bunkerweb-1     | www.xxxx 185.93.119.192 - - [14/Jan/2025:07:17:56 +0000] "GET /wpad.dat HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
bunker-bunkerweb-1     | 2025/01/14 07:17:57 [error] 302#302: *324 [lua] bouncer.lua:578: AppSecCheck(): Fallback because of err: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx"
bunker-bunkerweb-1     | 2025/01/14 07:17:57 [error] 302#302: *324 [lua] bouncer.lua:651: cs_allow(): AppSec check: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx"
bunker-bunkerweb-1     | www.xxxx 185.93.119.192 - - [14/Jan/2025:07:17:57 +0000] "GET /wpad.dat HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"

but a ping from the gui workes:

bunker-bw-ui-1         | [2025-01-14 07:17:56 +0000] [API] [7] [ℹ️ ] - Successfully sent API request to http://bunker-bunkerweb-1:5000/crowdsec/ping
bunker-bw-ui-1         | [2025-01-14 07:17:56 +0000] [UI] [7] [ℹ️ ] - Plugin crowdsec action executed successfully
bunker-bw-ui-1         | 116.203.156.79 - - [14/Jan/2025:07:17:56 +0000] "POST /yG9b4e9NUC/plugins/crowdsec?ping=true HTTP/1.0" 200 50 "https://xxx/yG9b4e9NUC/plugins/crowdsec" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"

also the crowdsec cli works:

is there anything i can do or provide?

Originally created by @celevra on GitHub (Jan 14, 2025). Original GitHub issue: https://github.com/bunkerity/bunkerweb-plugins/issues/120 Hi, with the newest version of bunkerweb (updated from 1.5.8) and the neweset plugin pack 1.6 i got following crowdsec errors: ``` bunker-bunkerweb-1 | xxx 116.203.156.79 - - [14/Jan/2025:07:17:56 +0000] "POST /yG9b4e9NUC/plugins/crowdsec?ping=true HTTP/2.0" 200 50 "https://wlb01.srvz.it/yG9b4e9NUC/plugins/crowdsec" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" bunker-bunkerweb-1 | 2025/01/14 07:17:56 [error] 301#301: *319 [lua] bouncer.lua:578: AppSecCheck(): Fallback because of err: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx" bunker-bunkerweb-1 | 2025/01/14 07:17:56 [error] 301#301: *319 [lua] bouncer.lua:651: cs_allow(): AppSec check: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx" bunker-bunkerweb-1 | www.xxxx 185.93.119.192 - - [14/Jan/2025:07:17:56 +0000] "GET /wpad.dat HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" bunker-bunkerweb-1 | 2025/01/14 07:17:56 [error] 301#301: *318 [lua] bouncer.lua:578: AppSecCheck(): Fallback because of err: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx" bunker-bunkerweb-1 | 2025/01/14 07:17:56 [error] 301#301: *318 [lua] bouncer.lua:651: cs_allow(): AppSec check: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx" bunker-bunkerweb-1 | www.xxxx 185.93.119.192 - - [14/Jan/2025:07:17:56 +0000] "GET /wpad.dat HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" bunker-bunkerweb-1 | 2025/01/14 07:17:57 [error] 302#302: *324 [lua] bouncer.lua:578: AppSecCheck(): Fallback because of err: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx" bunker-bunkerweb-1 | 2025/01/14 07:17:57 [error] 302#302: *324 [lua] bouncer.lua:651: cs_allow(): AppSec check: crowdsec could not be resolved (2: Server failure), client: 185.93.119.192, server: xxxx, request: "GET /wpad.dat HTTP/2.0", host: "www.xxxx" bunker-bunkerweb-1 | www.xxxx 185.93.119.192 - - [14/Jan/2025:07:17:57 +0000] "GET /wpad.dat HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ``` but a ping from the gui workes: ``` bunker-bw-ui-1 | [2025-01-14 07:17:56 +0000] [API] [7] [ℹ️ ] - Successfully sent API request to http://bunker-bunkerweb-1:5000/crowdsec/ping bunker-bw-ui-1 | [2025-01-14 07:17:56 +0000] [UI] [7] [ℹ️ ] - Plugin crowdsec action executed successfully bunker-bw-ui-1 | 116.203.156.79 - - [14/Jan/2025:07:17:56 +0000] "POST /yG9b4e9NUC/plugins/crowdsec?ping=true HTTP/1.0" 200 50 "https://xxx/yG9b4e9NUC/plugins/crowdsec" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ``` also the crowdsec cli works: ![image](https://github.com/user-attachments/assets/3aa14bc7-783c-4de9-adb9-46c80d5dda18) is there anything i can do or provide?

kerem closed this issue

2026-03-02 02:59:25 +03:00

kerem commented

2026-03-02 02:59:26 +03:00

Author

Owner

@celevra commented on GitHub (Jan 14, 2025):

with the Update it now supports appsec provided by crowdsec, as i don't use appsec until now the errors are correct.
closing, sorry.

@celevra commented on GitHub (Jan 14, 2025): with the Update it now supports appsec provided by crowdsec, as i don't use appsec until now the errors are correct. closing, sorry.