From 3730f224c64551c357835ac83de717c8a9a2e8b2 Mon Sep 17 00:00:00 2001
From: Mitchell Krog <mitchellkrog@gmail.com>
Date: Sun, 20 Aug 2017 13:54:47 +0200
Subject: [PATCH] Custom Jail for Repeat Error 444 and 403 Offenders [ci skip]
 - New improved Regex pattern for catching Jorgee - With Great Thanks to
 Konstantin Goretzki @terriblespider

---
 _fail2ban_addon/filter.d/nginxrepeatoffender.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/_fail2ban_addon/filter.d/nginxrepeatoffender.conf b/_fail2ban_addon/filter.d/nginxrepeatoffender.conf
index f02b6d680..a790dcd68 100644
--- a/_fail2ban_addon/filter.d/nginxrepeatoffender.conf
+++ b/_fail2ban_addon/filter.d/nginxrepeatoffender.conf
@@ -51,7 +51,7 @@ _daemon = fail2ban\.actions\s*
 # jail using this filter 'nginxrepeatoffender', or change this line!
 _jailname = nginxrepeatoffender
 
-failregex = ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) \/ \S+\" (?:403|444) .+$
+failregex = ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) .* \S+\" (?:403|444) .+$
 ignoreregex = 
 
 [Init]