Filter.d

# /etc/fail2ban/filter.d/http-404.conf


[Definition]
failregex = ^<HOST> -.*"(GET|POST|HEAD).*HTTP.*" 404
ignoreregex =

Jail.conf

[http-404]
enabled = true
port = http,https
logpath = /var/log/nginx/*error*.log
          /var/log/nginx/*access*.log
maxretry = 10
findtime = 20