fail2ban

Book Creator
Add this page to your book

Book Creator
Remove this page from your book

This is an old revision of the document!

apt install fail2ban

define new filter

[Definition]
failregex = ^<HOST> .+ /auth/token/v2 HTTP/1.[0-9]" 401
ignoreregex =

test filter

fail2ban-regex /var/log/nginx/access.log /etc/fail2ban/filter.d/giano-login.conf --print-all-matched

[giano-login]
enabled = true
filter = giano-login
port = http,https
logpath = /var/log/nginx/*access*.log
findtime = 60
bantime = 6000
maxretry = 3

test

fail2ban-client -d

restart service to apply filter and jail

systemctl restart fail2ban

fail2ban-client status giano-login

fail2ban-client set YOURJAILNAMEHERE unbanip IPADDRESSHERE