pff 0.2.0

pf filter - parse Nginx access.log for unwanted regexp patterns, and block them on the PF firewall
Documentation
1
2
3
4
5
6
7
(
    access_log: "./access.log",
    spammers_file: "/etc/spammers",
    buffer: 3000000,
    wanted: "(/robots\\.txt|favicon\\.ico|\\.m[4kop][34av]|sitemap.xml|/.well-known|\\.svg|verknowsys|\\.wasm|[[:alnum:]]{32}\\.p[dn][fg]|192\\.168\\.\\d{1,3}\\.\\d{1,3}|127\\.0\\.0\\.1|10\\.0\\.0\\.d{1,3})",
    unwanted: "(\\.php|XDEBUG|config\\.*|login\\.|\\.DS_Store|mifs|\\.axd|wp-*|\\.aws|\\.[axy]ml|\\.[aj]sp*|microsoft|\\.env|\\\\x\\d+|\\.cgi|cgi-bin|HNAP1|formLogin|owa/auth/x|/dev|/tmp|/var/tmp)",
)