Issue Default plesk-apache-badbot fail2ban doesn't work

[Kaspar@Plesk]

what is with the date pattern?

Which date pattern do you mean?

 

[Kaspar]

For anyone interested; If you have supplemented your bad bots filter list, like I have, you most likely end up with thousands of banned IP's. In some cases even almost entire subnet ranges. Which you may (or may not) like to permanently ban.

For this purpose I've created a script that groups all bans from fail2ban into their respective subnets. Making it easier to see how many IP's from a subnet a currently banned. I shared the script in the Resource section of the forum, as I think this might help other users too. See: Instruction - [Fail2ban] Bash script to group multiple banned IP into subnets

 

[Chad Reitsma]

I would also like to know what the "date pattern" is please. I've have this jail enabled on all servers and it hasn't been catching any bots (specifically GPTBot), and believe that may be the cause. I am using the stock conf/regex patterns.

Also, just for peace of mind... Will any changes be overwritten in future Plesk updates, or are these jails completely safe to modify?

[Edit]
The date pattern is:

datepattern = ^[^\[]*\[({DATE})
{^LN-BEG}

At the bottom of /filter.d/apache-badbots.conf

 

[Chad Reitsma]

what is with the date pattern?

Found this in another thread: Question - Rate Limiting

Peter said: "it is not required if your log files have a default format" (which they most likely do).