/etc/fail2ban/jail.d
NameSizeModeActions
apache-scanners.local4300644editdlrm
defaults-debian.conf220644editdlrm
recidive.local3620644editdlrm
sshd.local1550644editdlrm
wordpress.local1460644editdlrm
Edit: /etc/fail2ban/jail.d/apache-scanners.local (430B)
[apache-scanners] enabled = true port = http,https filter = apache-auth logpath = /var/log/apache2/access*.log # Баним за поиск конфигов, бэкапов и подозрительные 404 failregex = ^ .* "(GET|POST|HEAD) .*\.(bak|config|php.bak|php~|sql|env|git|env.local) .* 404 ^ .* "(GET|POST|HEAD) .*(setup\.php|phpmyadmin|pma) .* 404 maxretry = 2 findtime = 3600 bantime = 86400