{"id":7851,"date":"2025-08-14T05:52:35","date_gmt":"2025-08-14T03:52:35","guid":{"rendered":"https:\/\/www.lrob.fr\/?p=7851"},"modified":"2025-08-14T05:52:35","modified_gmt":"2025-08-14T03:52:35","slug":"guide-monitoring-reputation-uptime-kuma-abuseipdb","status":"publish","type":"post","link":"https:\/\/portail.lrob.fr\/en\/sysadmin\/guide-monitoring-reputation-uptime-kuma-abuseipdb\/","title":{"rendered":"Guide : Surveiller gratuitement la r\u00e9putation de ses IP avec Uptime Kuma et AbuseIPDB"},"content":{"rendered":"<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-38c38467 wp-block-group-is-layout-constrained\" style=\"border-width:1px;padding-top:var(--wp--preset--spacing--20);padding-right:var(--wp--preset--spacing--20);padding-bottom:var(--wp--preset--spacing--20);padding-left:var(--wp--preset--spacing--20)\">\n<p class=\"wp-block-paragraph\">Une seule compromission sur un serveur web peut le transformer en <strong>vecteur d\u2019attaque<\/strong> : envoi massif de spam, botnets, et c&rsquo;est le blacklisting de votre IP assur\u00e9. Il faut donc <strong>d\u00e9tecter rapidement<\/strong> les premiers signes pour r\u00e9agir vite et r\u00e9duire l&rsquo;impact n\u00e9gatif.<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Les experts en s\u00e9curit\u00e9 sont r\u00e9alistes et unanimes : sur une dur\u00e9e suffisamment longue, tout service finira pirat\u00e9. Faille 0 day, erreur technique, attaque suffisamment longue&#8230; La s\u00e9curit\u00e9 \u00e0 100% n&rsquo;est pas de ce monde.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alors la bonne approche, en plus de se rapprocher des 0% de risque par des <a href=\"https:\/\/portail.lrob.fr\/en\/caracteristiques\/hebergeur-web-securise-cybersecurite\/\">mesures de s\u00e9curit\u00e9 pr\u00e9ventives<\/a>, consiste \u00e0 <strong>surveiller en continu<\/strong> la r\u00e9putation de ses IP, de sorte \u00e0 <strong>r\u00e9agir d\u00e8s le premier signe d\u2019incident<\/strong> pour limiter la surface d&rsquo;attaque et \u00e9viter que les blacklists ne s&#8217;emballent.<\/p>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Info: Qu&rsquo;est-ce qu&rsquo;une blacklist IP ?<\/summary>\n<p class=\"wp-block-paragraph\">Une \u201cblacklist\u201d d\u2019IP (liste de blocage) est un registre d\u2019adresses IP r\u00e9put\u00e9es malveillantes ou ind\u00e9sirables (spam, attaques, fraude) que les syst\u00e8mes consultent pour refuser ou limiter l\u2019acc\u00e8s. Elle est utilis\u00e9e par des pare-feu, serveurs de messagerie et sites web, mais peut aussi produire des faux positifs ; les entr\u00e9es \u00e9voluent et peuvent \u00eatre retir\u00e9es apr\u00e8s v\u00e9rification.<\/p>\n<\/details>\n\n\n\n<p class=\"wp-block-paragraph\">Dans cet article, nous allons voir comment mettre en place un syst\u00e8me d\u2019alerte bas\u00e9 sur deux solutions gratuites :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Uptime Kuma<\/strong>, un outil libre de monitoring, h\u00e9berg\u00e9 sur votre propre machine ou un VPS ;<\/li>\n\n\n\n<li><strong>AbuseIPDB<\/strong>, base de donn\u00e9es collaborative d\u2019adresses IP signal\u00e9es.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cette pr\u00e9vention adapt\u00e9e est employ\u00e9e pour l&rsquo;<a class=\"\" href=\"https:\/\/portail.lrob.fr\/en\/hebergement-web\/\">infrastructure d\u2019h\u00e9bergement web<\/a> LRob et devrait vous \u00eatre utile, si vous h\u00e9bergez \u00e9galement des services. Nous rappelons que l\u2019\u00e9tat en temps r\u00e9el de l&rsquo;infratructure LRob, y compris la pr\u00e9sence \u00e9ventuelle dans la blacklist AbuseIPDB, est consultable publiquement : <a class=\"\" href=\"https:\/\/uptime.lrob.net\/status\/lrob\" target=\"_blank\" rel=\"noopener\">https:\/\/uptime.lrob.net\/status\/lrob<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cet article vous guidera \u00e9tape par \u00e9tape, comment reproduire cette configuration chez vous. <\/p>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-c9a371c5 wp-block-group-is-layout-constrained\" style=\"border-width:1px;padding-top:var(--wp--preset--spacing--30);padding-right:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30);padding-left:var(--wp--preset--spacing--30)\">\n<p class=\"wp-block-paragraph\">\u26a0\ufe0f Vos serveurs vous co\u00fbtent trop cher et trop de temps ? Ne manquez pas nos <a href=\"https:\/\/portail.lrob.fr\/en\/hebergement-web\/agence-web\/\">offres d&rsquo;h\u00e9bergement multi-sites<\/a>, qui vous feront gagner un <a href=\"https:\/\/portail.lrob.fr\/en\/caracteristiques\/hebergement-plesk-haute-performance-pour-sites-et-agences\/\">temps<\/a> et une <a href=\"https:\/\/portail.lrob.fr\/en\/caracteristiques\/hebergeur-web-securise-cybersecurite\/\">s\u00e9curit\u00e9<\/a> consid\u00e9rables, tout en faisant des \u00e9conomies et en b\u00e9n\u00e9ficiant d&rsquo;un <a href=\"https:\/\/portail.lrob.fr\/en\/caracteristiques\/meilleur-support-hebergeur-web\/\">support exceptionnel<\/a> ! Existe aussi en <a href=\"https:\/\/portail.lrob.fr\/en\/hebergement-web\/\">h\u00e9bergement pour un seul site<\/a>.<\/p>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"pourquoi-surveiller-la-reputation-de-son-ip\">Pourquoi surveiller la r\u00e9putation de son IP ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mieux vaut agir <strong>d\u00e8s les premiers signes<\/strong> d\u2019un probl\u00e8me que d\u2019attendre qu\u2019il soit trop tard.<br>Si une bo\u00eete mail est compromise ou qu\u2019un site pr\u00e9sente une faille, votre serveur peut rapidement devenir un <strong>vecteur d\u2019attaque<\/strong>, par exemple pour envoyer des millions de spams en quelques minutes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LRob applique d\u00e9j\u00e0 des protections efficaces, comme un <strong>anti-bruteforce<\/strong> sur les emails et une <strong>limite d\u2019envoi horaire<\/strong>, pour limiter ce genre de d\u00e9g\u00e2ts. Mais quelles que soient les mesures, une surveillance proactive de la <strong>r\u00e9putation d\u2019une IP<\/strong> permet de d\u00e9tecter rapidement toute \u00e9ventuelle anomalie, et d\u2019agir avant que la situation ne devienne g\u00eanante.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Car les <strong>listes d\u2019abus<\/strong> (<em>blacklists<\/em>) informent publiquement de la malveillance de vos IP. Et si votre IP est blacklist\u00e9e, les prestataires bloquent souvent les emails, restreignent l\u2019acc\u00e8s \u00e0 certains services et nuisent globalement \u00e0 la <strong>confiance<\/strong> accord\u00e9e \u00e0 un serveur ou \u00e0 un site.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alors le but du jeu est le suivant : Ne pas \u00eatre une victime des blacklists, mais s&rsquo;en servir comme d&rsquo;un <strong>indicateur fiable<\/strong> pour rep\u00e9rer un comportement suspect sur une machine, m\u00eame en dehors d\u2019une attaque active. Car les attaques peuvent \u00eatre br\u00e8ves ou tr\u00e8s discr\u00e8tes. Ceux qui les re\u00e7oivent en revanche, ne peuvent pas les louper.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Et pour cela, avec un suivi r\u00e9gulier, on peut identifier imm\u00e9diatement toute hausse du score d\u2019abus et intervenir <strong>avant<\/strong> que les cons\u00e9quences ne deviennent co\u00fbteuses. Il s&rsquo;agit au final d&rsquo;une mesure \u00e0 moiti\u00e9 pr\u00e9ventive, et \u00e0 moiti\u00e9 curative. Ou autrement dit, on \u00e9vite le pire.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ce-que-lon-va-mettre-en-place\">Ce qu\u2019il faut avant de commencer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Avant de mettre en place cette surveillance, il faut disposer :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>d\u2019un acc\u00e8s (gratuit ou payant) \u00e0 l\u2019<strong><a href=\"https:\/\/www.abuseipdb.com\/register?plan=free\" target=\"_blank\" rel=\"noopener\">API AbuseIPDB<\/a><\/strong><\/li>\n\n\n\n<li>d\u2019une <strong>instance <a href=\"https:\/\/github.com\/louislam\/uptime-kuma\" target=\"_blank\" rel=\"noopener\">Uptime Kuma<\/a><\/strong> fonctionnelle, install\u00e9e sur une <strong>VM locale<\/strong>, un <strong>VPS<\/strong> ou tout autre serveur accessible en permanence.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Uptime Kuma sera configur\u00e9 pour <strong>query (interroger) automatiquement l\u2019API AbuseIPDB<\/strong>, r\u00e9cup\u00e9rer le <strong>score d\u2019abus<\/strong> de votre IP, et v\u00e9rifier s\u2019il reste <strong>inf\u00e9rieur ou \u00e9gal<\/strong> \u00e0 un seuil fix\u00e9 (par exemple 5%).<br>Si ce score d\u00e9passe la limite choisie, vous recevrez une alerte pour intervenir rapidement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ce tutoriel se base uniquement sur <strong>AbuseIPDB<\/strong> comme source de r\u00e9putation, ce qui est d\u00e9j\u00e0 <strong>tr\u00e8s fiable<\/strong> pour un usage courant.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"configuration-pas-a-pas-dans-uptime-kuma\">Configuration pas \u00e0 pas dans Uptime Kuma<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">L\u2019objectif est de cr\u00e9er un <strong>moniteur<\/strong> qui va contr\u00f4ler r\u00e9guli\u00e8rement le score d\u2019abus de votre IP sur AbuseIPDB, et vous alerter si ce score d\u00e9passe un seuil fix\u00e9. Nous allons pour cela exploiter une expression JSON qui permet de retourner <code>true<\/code> ou <code>false<\/code> en fonction du r\u00e9sultat de la v\u00e9rification. True : tout va bien. False : vous recevez l&rsquo;alerte.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"1-creer-un-nouveau-moniteur\">1. Cr\u00e9er un nouveau moniteur de base<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Dans l\u2019interface Uptime Kuma :<\/p>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-center is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Cliquez sur <strong>\u201cAjouter un moniteur\u201d<\/strong><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff70331c&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff70331c\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"250\" height=\"123\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-add-new-monitor.jpg\" alt=\"Uptime Kuma add new monitor\" class=\"wp-image-7855\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-center is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Type de moniteur<\/strong> : <code>HTTP(s) - Json Query<\/code><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff7035c9&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff7035c9\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"348\" height=\"206\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-monitor-type-HTTPS-Json-Query.jpg\" alt=\"Uptime Kuma Json Query\" class=\"wp-image-7856\" srcset=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-monitor-type-HTTPS-Json-Query.jpg 348w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-monitor-type-HTTPS-Json-Query-300x178.jpg 300w\" sizes=\"auto, (max-width: 348px) 100vw, 348px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-center is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Nom d&rsquo;affichage<\/strong> (Friendly Name),  par exemple :<br><code>AbuseIPDB HOSTNAME IP<\/code><br><em>(remplacez HOSTNAME et IP par vos valeurs)<\/em><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff7037c3&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff7037c3\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"267\" height=\"77\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptim-kuma-abuseipdb-friendly-name.jpg\" alt=\"Uptime Kuma Friendly Name AbuseIPDB\" class=\"wp-image-7857\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-center is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<ul class=\"wp-block-list\">\n<li><strong>Heartbeat Interval<\/strong> : ajustez selon la fr\u00e9quence souhait\u00e9e (ex. toutes les 3600 secondes, soit 1h).<\/li>\n\n\n\n<li><strong>Retries<\/strong> : 0<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff7039a6&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff7039a6\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"517\" height=\"453\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-abuseipdb-intervals.jpg\" alt=\"Uptime Kuma Fr\u00e9quence AbuseIPDB\" class=\"wp-image-7859\" srcset=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-abuseipdb-intervals.jpg 517w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-abuseipdb-intervals-300x263.jpg 300w\" sizes=\"auto, (max-width: 517px) 100vw, 517px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2. R\u00e9glages de base de l&rsquo;API AbuseIPDB du moniteur<\/h3>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-center is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<ul class=\"wp-block-list\">\n<li><strong>URL<\/strong> : <code>https:\/\/api.abuseipdb.com\/api\/v2\/check<\/code><\/li>\n\n\n\n<li><strong>Json Query<\/strong> : <code>$number($.data.abuseConfidenceScore) &lt;= 5<\/code>\n<ul class=\"wp-block-list\">\n<li><em>(remplacez <code><strong>5<\/strong><\/code> par votre seuil de tol\u00e9rance, il correspond au pourcentage de risque sur AbuseIPDB)<\/em><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Expected Value<\/strong> : <code>true<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udca1 Cette expression retourne <code>true<\/code> si le score est inf\u00e9rieur ou \u00e9gal \u00e0 votre seuil, et <code>false<\/code> sinon. Uptime Kuma d\u00e9clenche alors une alerte selon votre r\u00e9glage de notifications, uniquement si le r\u00e9sultat est <code>false<\/code>.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff703bd5&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff703bd5\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"526\" height=\"328\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-abuseipdb-api-query-settings2.jpg\" alt=\"\" class=\"wp-image-7862\" srcset=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-abuseipdb-api-query-settings2.jpg 526w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-abuseipdb-api-query-settings2-300x187.jpg 300w\" sizes=\"auto, (max-width: 526px) 100vw, 526px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"4-configurer-les-options-http\">3. Configurer les options HTTP de l&rsquo;API AbuseIPDB<\/h3>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Dans <strong>HTTP Options<\/strong> :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Method<\/strong> : <code>GET<\/code><\/li>\n\n\n\n<li><strong>Body Encoding<\/strong> : <code>JSON<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Dans <strong>Body<\/strong>, d\u00e9finissez ce code en rempla\u00e7ant <code>Your_IP<\/code> par l&rsquo;IP \u00e0 monitorer :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n    \"ipAddress\": \"Your_IP\",\n    \"maxAgeInDays\": \"1\",\n    \"verbose\": \"true\"\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Dans <strong>Headers<\/strong>, mettez votre cl\u00e9 API \u00e0 la place de <code>Your_API_Key<\/code> :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n    \"Key\": \"Your_API_Key\",\n    \"Accept\": \"application\/json\"\n}<\/code><\/pre>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff703e30&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff703e30\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"523\" height=\"723\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-http-options-abuseipdb.jpg\" alt=\"Uptime Kuma HTTP Options for AbuseIPDB API check\" class=\"wp-image-7861\" srcset=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-http-options-abuseipdb.jpg 523w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/uptime-kuma-http-options-abuseipdb-217x300.jpg 217w\" sizes=\"auto, (max-width: 523px) 100vw, 523px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">4. V\u00e9rifier la configuration finale<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vous devriez obtenir une configuration similaire :<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a1c8ff703fe9&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a1c8ff703fe9\" class=\"wp-block-image size-full wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1078\" height=\"1265\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/config-uptime-kuma-query-abuseipdb.jpg\" alt=\"Configuration Uptime Kuma Monitoring de Blacklist AbuseIPDB\" class=\"wp-image-7853\" srcset=\"https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/config-uptime-kuma-query-abuseipdb.jpg 1078w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/config-uptime-kuma-query-abuseipdb-256x300.jpg 256w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/config-uptime-kuma-query-abuseipdb-873x1024.jpg 873w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/config-uptime-kuma-query-abuseipdb-768x901.jpg 768w, https:\/\/portail.lrob.fr\/wp-content\/uploads\/2025\/08\/config-uptime-kuma-query-abuseipdb-600x704.jpg 600w\" sizes=\"auto, (max-width: 1078px) 100vw, 1078px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"5-sauvegarder-et-tester\">5. Sauvegarder et tester<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Une fois les param\u00e8tres d\u00e9finis, cliquez sur <strong>Save (Enregistrer)<\/strong> puis observez le premier test :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Si le score est en dessous du seuil \u2192 moniteur <strong>UP<\/strong><\/li>\n\n\n\n<li>Si le score d\u00e9passe le seuil \u2192 moniteur <strong>DOWN<\/strong> et alerte envoy\u00e9e<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Avec ce r\u00e9glage, vous saurez imm\u00e9diatement si la r\u00e9putation de votre IP se d\u00e9grade.<br>Par exemple :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Score 0<\/strong> \u2192 tout va bien<\/li>\n\n\n\n<li><strong>Score 4<\/strong> \u2192 encore acceptable<\/li>\n\n\n\n<li><strong>Score 12<\/strong> \u2192 alerte<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Un mot sur l\u2019astuce du seuil de d\u00e9tection en JSON<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Chez LRob, il y a presque 1 an, \u00e0 l&rsquo;accueil d&rsquo;un client dont le site \u00e9tait \u00e0 r\u00e9parer suite \u00e0 un hack, son site a \u00e9t\u00e9 exploit\u00e9 pendant la r\u00e9paration sur nos serveurs. Unique occurrence d&rsquo;utilisation malveillante sur les serveurs LRob. Cela nous a permis de <a href=\"https:\/\/portail.lrob.fr\/en\/blog\/lrob-contribue-abuseipdb\/\">d\u00e9couvrir AbuseIPDB<\/a> avec un grand enthousiasme puisque nous cherchions justement un tel outil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Un bref incident, sold\u00e9 d&rsquo;une touche positive, me direz-vous.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sauf que depuis cet incident, un contributeur AbuseIPDB continue de report l&rsquo;IP du serveur chaque semaine, alors que l&rsquo;incident est termin\u00e9 depuis presque 1 an. Et il n&rsquo;y a aucun moyen de l&#8217;emp\u00eacher. D\u00e8s qu\u2019il \u00e9met ne serait-ce qu&rsquo;un seul report, le score de l&rsquo;IP remonte \u00e0 <strong>4%<\/strong> de risque.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Or, \u00e0 la base, Uptime Kuma ne permet que de v\u00e9rifier si <strong>Expected Value = 0<\/strong>.<br>Autrement dit, un risque \u00e0 1% ou 4% d\u00e9clenchait l&rsquo;alertE. Donc ce serveur \u00e9tait tout le temps en alerte.<br>Un <strong>faux positif<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La solution propre : <strong>\u00e9valuer un seuil<\/strong> directement dans la <em>Json Query<\/em> gr\u00e2ce \u00e0 une <strong>expression JSONata<\/strong>. Plut\u00f4t que d\u2019attendre la valeur exacte \u201c0\u201d, Uptime Kuma v\u00e9rifie d\u00e9sormais que le score est <strong>inf\u00e9rieur ou \u00e9gal<\/strong> \u00e0 une limite jug\u00e9e saine (par exemple <strong>5<\/strong>) ; et retourne <code>true<\/code> ou <code>false<\/code>. D\u00e9sormais, l\u2019\u00e9tat ne passe en alerte que <strong>si le score d\u00e9passe la valeur<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C&rsquo;est le principe de ce code, qui v\u00e9rifie si la valeur en question est bien inf\u00e9rieure ou \u00e9gale \u00e0 5.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$number($.data.abuseConfidenceScore) &lt;= 5<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Uptime Kuma attend la valeur <code>true<\/code> en retour. Si le seuil est inf\u00e9rieur \u00e0 5, pas d&rsquo;alerte. Si \u00e7a d\u00e9passe, alerte.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cette correction de config vient tout juste d&rsquo;\u00eatre appliqu\u00e9e, donc si vous visitez l&rsquo;<a href=\"https:\/\/uptime.lrob.net\/status\/lrob\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\u00e9tat des serveurs<\/a> dans les 24h suivant la publication de cet article, vous verrez que \u00ab\u00a0Blacklists\u00a0\u00bb n&rsquo;est pas \u00e0 100% d&rsquo;uptime, contrairement \u00e0 tous les autres services. Vous avez d\u00e9sormais toute l&rsquo;histoire.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On esp\u00e8re que la configuration utilis\u00e9e pour l&rsquo;<a class=\"\" href=\"https:\/\/portail.lrob.fr\/en\/hebergement-web\/\">infrastructure d\u2019h\u00e9bergement web<\/a> LRob vous aidera \u00e0 mieux s\u00e9curiser vos serveurs, pour nous aider faire un meilleur internet.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Et si vous pensez que cela \u00e9tait fort int\u00e9ressant, dites-vous que ce n&rsquo;est que la pointe de l&rsquo;iceberg de ce que LRob met en oeuvre pour assurer un service d&rsquo;exception !<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nous sommes convaincus que LRob m\u00e9rite d&rsquo;\u00eatre davantage connu.<br>Alors faites un tour sur <a href=\"https:\/\/portail.lrob.fr\/en\/\">le site<\/a>, lisez ce qu&rsquo;on a \u00e0 dire, regardez les offres, essayez notre Chatbot maison, et n&rsquo;h\u00e9sitez pas \u00e0 partager ce que vous trouvez int\u00e9ressant sur tous vos r\u00e9seaux, cela nous soutiendra notre mission pour un internet propre !<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Merci pour votre lecture et pour votre soutien.<\/p>","protected":false},"excerpt":{"rendered":"<p>V\u00e9rifier automatiquement si ses IP sont blacklist\u00e9es ? Voici comment faire, avec des outils gratuits, qui \u00e9vitent bien des soucis !<\/p>","protected":false},"author":1,"featured_media":7853,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[46],"tags":[74,61,75,76,77],"class_list":["post-7851","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sysadmin","tag-abuseipdb","tag-hebergement-web","tag-monitoring","tag-reputation-ip","tag-uptime-kuma"],"_links":{"self":[{"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/posts\/7851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/comments?post=7851"}],"version-history":[{"count":0,"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/posts\/7851\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/media\/7853"}],"wp:attachment":[{"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/media?parent=7851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/categories?post=7851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/portail.lrob.fr\/en\/wp-json\/wp\/v2\/tags?post=7851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}