Fail2Ban Filter Regex Update (nginxrepeatoffender.conf)

75 views
Skip to first unread message

Mitchell Krog Photography

unread,
Aug 20, 2017, 8:08:09 AM8/20/17
to nginx-ultimate-...@googlegroups.com

The Custom Jail for Repeat Error 444 and 403 Offenders (filter.d/nginxrepeatoffender.conf) has been updated with an improved Regex to catch 444 offenders who had been slipping under the radar, especially the Jorgee Scanner.

This New improved Regex pattern for catching Jorgee and others who may slip past undetected was contributed by Konstantin Goretzki @terriblespider.

Many Thanks Konstantin.

Pull the updated file as follows:

sudo wget https://raw.githubusercontent.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker/master/_fail2ban_addon/filter.d/nginxrepeatoffender.conf -O /etc/fail2ban/filter.d/nginxrepeatoffender.conf

and then

sudo service fail2ban restart

Thank you very much @terriblespider

Reply all
Reply to author
Forward
0 new messages