# Fail2Ban configuration file
#
# Author: Glen Jackson
#
# Detect Bot Shell requests.

[Definition]

failregex = ^.* <HOST> .* (/wso.php|/fx.php|/shell.php|/shells.php|/xleet.php|/0z.php|/legion.php|/xmlrpcs.php|/wikindex.php|/xleet-shell.php|/wp-wso.php|/tuco.php|/wp-mna.php|/wpx.php|/gel4y.php|/MARIJUANA.php|/FoxWSOv1.php|/1xleet.php|/xxx.php|/wp-commentin.php|/wso2.php|/Alfa.php|/w3llstore.php|/priv8.php|/mari.php|/haxor.php|/c99.php|/punisher.php|/alfashel.php|/2index.php|/3index.php|/inje3ctor.php|/defau11.php|/0byte.php|/wp-plugins.php|/fx.php|/ups.php|/Makhdamxshell.php|/1337.php) HTTP/1.1" 404