filter.d/apache-fakegooglebot.conf: better, more precise regex and da…

…tepattern (closes possible weakness like #3013)
fail2ban · May 11, 2021 · 3f9cf27 · 3f9cf27
1 parent 4f84271
commit 3f9cf27
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/config/filter.d/apache-fakegooglebot.conf b/config/filter.d/apache-fakegooglebot.conf
@@ -2,11 +2,11 @@
 
 [Definition]
 
-failregex = ^<HOST> .*Googlebot.*$
+failregex = ^\s*<HOST> \S+ \S+(?: \S+)?\s+\S+ "[A-Z]+ /\S* [^"]*" \d+ \d+ \"[^"]*\" "[^"]*\bGooglebot/[^"]*"
 
 ignoreregex =
 
-datepattern = ^[^\[]*\[({DATE})
+datepattern = ^[^\[]*(\[{DATE}\s*\])
               {^LN-BEG}
 
 # DEV Notes: