vikarti.anatra/nginx-ultimate-bad-bot-blocker
1
0
Fork 0
mirror of https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker.git synced 2025-09-10 23:34:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fail2Ban Filter Regex Modified

Browse source
This commit is contained in:
Mitchell Krog 2017-01-11 15:28:58 +02:00
parent 72ca64c0e4
commit 02180d6746
3 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Fail2Ban/filter.d/nginxrepeatoffender.conf
View file

@ -2,12 +2,12 @@
# Fail2Ban Blacklist for Repeat Offenders of Nginx (filter.d)
#
# Author: Mitchell Krog <mitchellkrog@gmail.com>
# Version: 1.0
# Version: 1.1
#
# Add on for Nginx Ultimate Bad Bot blocker
# GitHub: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
#
# Tested On: Fail2Ban 0.91
# Tested On: Fail2Ban 0.9.3
# Server: Ubuntu 16.04
# Firewall: IPTables
#
@ -21,9 +21,9 @@
#
# Based on: The Recidive Jail from Fail2Ban
# This custom filter and action will monitor your Nginx logs and perma-ban
# any IP address that has generated far too many 444 errors over a 1 week period
# any IP address that has generated far too many 444 or 403 errors over a 1 week period
# and ban them for 1 day. This works like a charm as an add-on for my Nginx Bad
# Bot Blocker which takes care of generating the 444 errors based on the extensive
# Bot Blocker which takes care of generating the 444 or 403 errors based on the extensive
# list of Bad Referers, Bots, Scrapers and IP addresses it covers.
# See - https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker for more info
#
@ -51,7 +51,7 @@ _daemon = fail2ban\.actions\s*
# jail using this filter 'nginxrepeatoffender', or change this line!
_jailname = nginxrepeatoffender
failregex = ^<HOST> -.*GET.*444\s0
failregex = ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) \/<block> \S+\" (?:403|444) .+$
ignoreregex =
[Init]