This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.
*Testing the speed with fail2ban-regex I get significantly faster iteration of a big log file with a regex formed like this. It is searching only a part of the string after it finds http method for each entry. more memory efficient and faster banning.
added magento and bitcoin scanner lines
I suggest future improvements in initializing 2 variables, one for referer and one for requested url as some of this lines are getting hits in referer and some in get urls. by having 2 sepparate arrays making even more efficient regexp would be possible.
*Testing the speed with fail2ban-regex I get significantly faster iteration of a big log file with a regex formed like this. It is searching only a part of the string after it finds http method for each entry. more memory efficient and faster banning.
I suggest future improvements in initializing 2 variables, one for referer and one for requested url as some of this lines are getting hits in referer and some in get urls. by having 2 sepparate arrays making even more efficient regexp would be possible.