fail2ban/filter.d/scanlogd.conf
Arija A. 7138c7cf7c
init
Signed-off-by: Arija A. <ari@ari.lt>
2025-12-02 21:00:07 +02:00

17 lines
354 B
Text

# Fail2Ban filter for port scans detected by scanlogd
[INCLUDES]
# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf
[Definition]
_daemon = scanlogd
failregex = ^%(__prefix_line)s<ADDR>(?::<F-PORT/>)? to \S+ ports\b
ignoreregex =
# Author: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>