/etc/fail2ban/filter.d/
/etc/fail2ban/filter.d
NameSizeModeActions
ignorecommands/-0755rm
3proxy.conf4670644editdlrm
apache-auth.conf32280644editdlrm
apache-badbots.conf28310644editdlrm
apache-botsearch.conf12650644editdlrm
apache-common.conf16190644editdlrm
apache-fakegooglebot.conf3240644editdlrm
apache-modsecurity.conf5110644editdlrm
apache-nohome.conf5960644editdlrm
apache-noscript.conf12460644editdlrm
apache-overflows.conf21840644editdlrm
apache-pass.conf3620644editdlrm
apache-shellshock.conf10200644editdlrm
assp.conf34920644editdlrm
asterisk.conf23690644editdlrm
bitwarden.conf4270644editdlrm
botsearch-common.conf5220644editdlrm
centreon.conf3070644editdlrm
common.conf27750644editdlrm
counter-strike.conf2440644editdlrm
courier-auth.conf4630644editdlrm
courier-smtp.conf5120644editdlrm
cyrus-imap.conf4440644editdlrm
directadmin.conf3380644editdlrm
domino-smtp.conf21070644editdlrm
dovecot.conf24530644editdlrm
dropbear.conf17300644editdlrm
drupal-auth.conf5570644editdlrm
ejabberd-auth.conf15720644editdlrm
exim-common.conf5160644editdlrm
exim-spam.conf21580644editdlrm
exim.conf28750644editdlrm
freeswitch.conf19220644editdlrm
froxlor-auth.conf12100644editdlrm
gitlab.conf2360644editdlrm
grafana.conf3880644editdlrm
groupoffice.conf2360644editdlrm
gssftpd.conf3220644editdlrm
guacamole.conf14470644editdlrm
haproxy-http-auth.conf11700644editdlrm
horde.conf4040644editdlrm
kerio.conf9380644editdlrm
lighttpd-auth.conf3330644editdlrm
mongodb-auth.conf22790644editdlrm
monit.conf7870644editdlrm
murmur.conf9270644editdlrm
mysqld-auth.conf9530644editdlrm
nagios.conf4000644editdlrm
named-refused.conf14960644editdlrm
nginx-botsearch.conf6810644editdlrm
nginx-http-auth.conf4850644editdlrm
nginx-limit-req.conf14540644editdlrm
nsd.conf7600644editdlrm
openhab.conf4520644editdlrm
openwebmail.conf4950644editdlrm
oracleims.conf19370644editdlrm
pam-generic.conf9470644editdlrm
perdition.conf5680644editdlrm
php-url-fopen.conf8910644editdlrm
phpmyadmin-syslog.conf2780644editdlrm
portsentry.conf2420644editdlrm
postfix.conf31640644editdlrm
proftpd.conf11630644editdlrm
pure-ftpd.conf24090644editdlrm
qmail.conf7950644editdlrm
recidive.conf13740644editdlrm
roundcube-auth.conf15410644editdlrm
scanlogd.conf3540644editdlrm
screensharingd.conf8210644editdlrm
selinux-common.conf5380644editdlrm
selinux-ssh.conf5700644editdlrm
sendmail-auth.conf7760644editdlrm
sendmail-reject.conf29490644editdlrm
sieve.conf3710644editdlrm
slapd.conf7060644editdlrm
softethervpn.conf4510644editdlrm
sogo-auth.conf7220644editdlrm
solid-pop3d.conf10940644editdlrm
squid.conf2600644editdlrm
squirrelmail.conf1910644editdlrm
sshd.conf75180644editdlrm
stunnel.conf3630644editdlrm
suhosin.conf6490644editdlrm
tine20.conf8900644editdlrm
traefik-auth.conf23900644editdlrm
uwimap-auth.conf3740644editdlrm
vsftpd.conf6370644editdlrm
webmin-auth.conf4440644editdlrm
wordpress.conf930644editdlrm
wuftpd.conf5200644editdlrm
xinetd-fail.conf5210644editdlrm
znc-adminlog.conf9120644editdlrm
zoneminder.conf5240644editdlrm
Edit: /etc/fail2ban/filter.d/apache-badbots.conf (2831B)
# Fail2Ban configuration file # # Regexp to catch known spambots and software alike. Please verify # that it is your intent to block IPs which were driven by # above mentioned bots. [Definition] badbotscustom = EmailCollector|WebEMailExtrac|TrackBack/1\.02|sogou music spider|(?:Mozilla/\d+\.\d+ )?Jorgee badbots = Atomic_Email_Hunter/4\.0|atSpider/1\.0|autoemailspider|bwh3_user_agent|China Local Browse 2\.6|ContactBot/0\.2|ContentSmartz|DataCha0s/2\.0|DBrowse 1\.4b|DBrowse 1\.4d|Demo Bot DOT 16b|Demo Bot Z 16b|DSurf15a 01|DSurf15a 71|DSurf15a 81|DSurf15a VA|EBrowse 1\.4b|Educate Search VxB|EmailSiphon|EmailSpider|EmailWolf 1\.00|ESurf15a 15|ExtractorPro|Franklin Locator 1\.8|FSurf15a 01|Full Web Bot 0416B|Full Web Bot 0516B|Full Web Bot 2816B|Guestbook Auto Submitter|Industry Program 1\.0\.x|ISC Systems iRc Search 2\.1|IUPUI Research Bot v 1\.9a|LARBIN-EXPERIMENTAL \(efp@gmx\.net\)|LetsCrawl\.com/1\.0 \+http\://letscrawl\.com/|Lincoln State Web Browser|LMQueueBot/0\.2|LWP\:\:Simple/5\.803|Mac Finder 1\.0\.xx|MFC Foundation Class Library 4\.0|Microsoft URL Control - 6\.00\.8xxx|Missauga Locate 1\.0\.0|Missigua Locator 1\.9|Missouri College Browse|Mizzu Labs 2\.2|Mo College 1\.9|MVAClient|Mozilla/2\.0 \(compatible; NEWT ActiveX; Win32\)|Mozilla/3\.0 \(compatible; Indy Library\)|Mozilla/3\.0 \(compatible; scan4mail \(advanced version\) http\://www\.peterspages\.net/?scan4mail\)|Mozilla/4\.0 \(compatible; Advanced Email Extractor v2\.xx\)|Mozilla/4\.0 \(compatible; Iplexx Spider/1\.0 http\://www\.iplexx\.at\)|Mozilla/4\.0 \(compatible; MSIE 5\.0; Windows NT; DigExt; DTS Agent|Mozilla/4\.0 efp@gmx\.net|Mozilla/5\.0 \(Version\: xxxx Type\:xx\)|NameOfAgent \(CMS Spider\)|NASA Search 1\.0|Nsauditor/1\.x|PBrowse 1\.4b|PEval 1\.4b|Poirot|Port Huron Labs|Production Bot 0116B|Production Bot 2016B|Production Bot DOT 3016B|Program Shareware 1\.0\.2|PSurf15a 11|PSurf15a 51|PSurf15a VA|psycheclone|RSurf15a 41|RSurf15a 51|RSurf15a 81|searchbot admin@google\.com|ShablastBot 1\.0|snap\.com beta crawler v0|Snapbot/1\.0|Snapbot/1\.0 \(Snap Shots, \+http\://www\.snap\.com\)|sogou develop spider|Sogou Orion spider/3\.0\(\+http\://www\.sogou\.com/docs/help/webmasters\.htm#07\)|sogou spider|Sogou web spider/3\.0\(\+http\://www\.sogou\.com/docs/help/webmasters\.htm#07\)|sohu agent|SSurf15a 11 |TSurf15a 11|Under the Rainbow 2\.2|User-Agent\: Mozilla/4\.0 \(compatible; MSIE 6\.0; Windows NT 5\.1\)|VadixBot|WebVulnCrawl\.unknown/1\.0 libwww-perl/5\.803|Wells Search II|WEP Search 00 failregex = ^ -.*"(GET|POST|HEAD).*HTTP.*"(?:%(badbots)s|%(badbotscustom)s)"$ ignoreregex = datepattern = ^[^\[]*\[({DATE}) {^LN-BEG} # DEV Notes: # List of bad bots fetched from http://www.user-agents.org # Generated on Thu Nov 7 14:23:35 PST 2013 by files/gen_badbots. # # Author: Yaroslav Halchenko