Regex Editor & Tester
Build, test, and debug regular expressions
Build, test, and debug regular expressions
A fail2ban filter regex for nginx access logs that matches lines with HTTP 403 (Forbidden) responses. It optionally handles IPv6-mapped client prefixes like ::ffff:, captures the client IP into the named group 'host' (used by fail2ban for banning), then matches a GET or POST request with a quoted URL ending in status code 403. Ideal for jailing clients repeatedly accessing forbidden resources.