On 2022-02-26 01:46, Sophie Loewenthal wrote: > # cat filter.d/nginx-x00.conf > > [Definition]> failregex = ^<HOST> .* ".*\\x.*" .*$ > Try adding this (the escaped "%" is necessary): datepattern = %%m/%%d/%%Y:%%H:%%M:%%S
> 35.205.35.197 - - [01/Feb/2022:03:10:28 +0000] >> "GET / HTTP/1.1" > 200 12778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; >> x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1.1.1.1/Safari >> > /537.36": 1 Time(s) > I also note there is no match for ".*\\x.*" . -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
