> On 25 Feb 2022, at 7:48 pm, James Moe via Fail2ban-users
> <fail2ban-users@lists.sourceforge.net> wrote:
>
> On 2022-02-24 11:01, Graham B. wrote:
>
>> I had this message from fail2ban after an upgrade from Debian 9
>> to 10 for many months.
>>
>> How could I mend these jails?
>>
>> ** WARNINGS **
>> [nginx-x1] Please check jail has possibly a timezone issue. Line
>> with odd timestamp: 35.205.35.197 - - [01/Feb/2022:03:10:28 +0000]
>> "GET / HTTP/1.1" 200 12778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
>> x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1.1.1.1/Safari
>> /537.36": 1 Time(s)
>>
>
> What is the "failregex" for this jail? Or the name of the filter file?
>
> --
> James Moe
> moe dot james at sohnen-moe dot com
> 520.743.3936
> Think.
>
>
Hi,
The files contain this. I think that I added these back in 2017.
# cat filter.d/nginx-x00.conf
[Definition] failregex = ^<HOST> .* ".*\\x.*" .*$
# jail.local
[nginx-x00] enabled = true
port = http,https filter = nginx-x00
#logpath = /var/log/nginx/access.log logpath =
%(nginx_access_log)s bantime = 13600
maxretry = 1
#
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
