Files
etcprs/scripts/fail2ban/nginx-scan.conf
RaineAllDay 8eb864192a
All checks were successful
Deploy / Check & Build (push) Successful in 1m18s
Deploy / Deploy to Production (push) Successful in 1m13s
updates to fail2ban configs
2026-03-18 20:57:17 -06:00

11 lines
445 B
Plaintext

[Definition]
# Matches Nginx combined log format:
# 1.2.3.4 - - [18/Mar/2026:09:45:00 +0000] "GET /path HTTP/1.1" 404 162 "-" "agent"
#
# Triggers on 4xx responses (config probes, scanners, bad requests)
# 5xx excluded to avoid banning on legitimate server errors
failregex = ^<HOST> - \S+ \[.*?\] "(?:GET|POST|HEAD|PUT|DELETE|OPTIONS|PATCH) \S+ HTTP/\d\.\d" 4\d\d \d+
ignoreregex = ^<HOST> - \S+ \[.*?\] "\S+ \S+ HTTP/\d\.\d" 400 \d+.*"NTRIP