fail2ban/config/filter.d/scanlogd.conf

# Fail2Ban filter for port scans detected by scanlogd

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

_daemon = scanlogd

failregex =  ^%(__prefix_line)s<ADDR>(?::<F-PORT/>) to \S+ ports\b

ignoreregex =

# Author: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
config/: Add support for filtering out detected port scans via scanlogd. 4 years ago			`# Fail2Ban filter for port scans detected by scanlogd`

			`[INCLUDES]`

			`# Read common prefixes. If any customizations available -- read them from`
			`# common.local`
			`before = common.conf`

			`[Definition]`

			`_daemon = scanlogd`

fixed regex (don't need to match whole line, e. g. every port etc) 4 years ago			`failregex = ^%(__prefix_line)s<ADDR>(?::<F-PORT/>) to \S+ ports\b`
config/: Add support for filtering out detected port scans via scanlogd. 4 years ago
			`ignoreregex =`

			`# Author: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>`