/etc/fail2ban/filter.d/gitpull-spammers-filedelete.conf
[Definition] # Some bots trying to visit all delete files? lol # gitpull.it:443 47.82.60.89 - - [21/May/2025:20:03:22 +0200] "GET /file/delete/3093323/ HTTP/1.1" 200 8613 "https://gitpull.it/file/delete/3093323/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" failregex = ^gitpull\.it:443 <HOST> - .* "GET /file/delete/.* HTTP.*" 200 ignoreregex =
/etc/fail2ban/jail.d/gitpull-spammers-filedelete.conf
[gitpull-spammers-filedelete] enabled = true filter = gitpull-spammers-filedelete maxretry = 10 bantime = 3600 logpath = /var/log/apache2/other_vhosts_access.log action = iptables[name=gitpull-spammers-filedelete, port=443, protocol=tcp]