Fail2ban. Jail для кодов 403 и 404

# Fail2Ban filter to match intentionally broken web requests

[INCLUDES]
before = botsearch-common.conf

[Definition]

failregex = ^<HOST> \- \S+ \[\] \"(?!GET|POST|HEAD).*$
            ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) [^"]+\" 400 .+$
            ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) \/(.?<block>|(sql|mysql|\.env|laravel|backend|app|db|database|PMA|admin[^/]*/(pma|phpMyAdmin|db|sqladmin|admindb|dbadmin))[^,]*) \S+\" (400|404|444) .+$
            ^ \[error\] \d+#\d+: \*\d+ (\S+ )?\"\S+\" (failed|is not found) \(2\: No such file or directory\), client\: <HOST>\, server\: \S*\, request: \"(GET|POST|HEAD) \/<block> \S+\"\, .*?$

datepattern = {^LN-BEG}%%ExY(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)?
              ^[^\[]*\[({DATE})
              {^LN-BEG}

[nginx]
enabled  = true
port = http,https
#port = all
filter = nginx-garbage 
logpath = /var/log/nginx/*access.log
maxretry = 1
findtime = 180
bantime = 4294967
banaction = firewallcmd-ipset