Add webpath-abuse filter.

0.10.2/filter.d/webpath-abuse.conf

@@ -0,0 +1,3 @@
+[Definition]
+failregex = ^<HOST> .*(GET|POST) (/classwithtostring\.php|/this_is_a_new_hello_world\.php|/cgi-bin/.*|/v./graphi?ql|/this_is_a_new_hello_world\.php|/graphql$|/alfacgiapi/.*|/\.env[\._](bak|old)|/fileadmin.*|//?xmlrpc\.php.*|/wp-admin/.*|/wp-content/plugins/.*|/wp-includes/.*|/wp-login.php|/wordpress/.*|/wp/.*|.*/wlwmanifest\.xml|/makeasmtp\.php) HTTP.*
+ignoreregex =

0.10.2/jail.local

@@ -188,3 +188,16 @@ maxretry = 5
 findtime = 600
 bantime  = 10800
 port = http,https
+
+
+[webpath-abuse]
+
+enabled = true
+port    = http,https
+filter  = webpath-abuse
+logpath = /var/log/apache2/ip_requests.log
+maxretry = 4
+findtime = 3600
+bantime = 3600
+#ignoreip = 127.0.0.1 ::1 203.0.113.42
+#backend = auto