From fee996909952ea1f3c1a3b12a41f61f1ea6c5272 Mon Sep 17 00:00:00 2001 From: "srvproxy001.itguys.com.br" Date: Sun, 21 Sep 2025 23:08:07 -0300 Subject: [PATCH] =?UTF-8?q?[Auto-Sync]=20Atualiza=C3=A7=C3=A3o=20das=20con?= =?UTF-8?q?figura=C3=A7=C3=B5es=20em=20srvproxy001.itguys.com.br=20-=20202?= =?UTF-8?q?5-09-21=2023:08:07?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- fail2ban/jail.local | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/fail2ban/jail.local b/fail2ban/jail.local index 47a0c80..c46c08d 100644 --- a/fail2ban/jail.local +++ b/fail2ban/jail.local @@ -67,3 +67,33 @@ findtime = 5m # Numa janela de 5 minutos bantime = 24h # Bane por 24 horas. Ataques ao Exchange são sérios. + +[nginx-json-scanners] +enabled = true +port = http,https +filter = nginx-json-scanners +logpath = /var/log/nginx/access.log +maxretry = 2 +# Scanners não precisam de muitas chances. +findtime = 10m +bantime = 1w +# Bane scanners por uma semana. + +[nginx-json-exploits] +enabled = true +port = http,https +filter = nginx-json-exploits +logpath = /var/log/nginx/access.log +maxretry = 2 +# Tentativas de exploração devem ser bloqueadas rapidamente. +findtime = 10m +bantime = 1w + +[nginx-json-badbots] +enabled = true +port = http,https +filter = nginx-json-badbots +logpath = /var/log/nginx/access.log +maxretry = 2 +findtime = 10m +bantime = 1w