Files
etcprs/scripts/fail2ban/nginx-scan.conf
2026-03-18 04:22:42 -06:00

9 lines
398 B
Plaintext

[Definition]
# Match lines from nginx access log with 4xx/5xx responses
# Nginx combined log format:
# 1.2.3.4 - - [18/Mar/2026:09:45:00 +0000] "GET /backend/config/default.yml HTTP/1.1" 404 ...
failregex = ^<HOST> .+ "(GET|POST|HEAD|PUT|DELETE|OPTIONS|PATCH) .+ HTTP/\d\.\d" 40[0-9] .+$
^<HOST> .+ "(GET|POST|HEAD|PUT|DELETE|OPTIONS|PATCH) .+ HTTP/\d\.\d" 5[0-9]{2} .+$
ignoreregex =