Michael Jelks

The Problem You get a traffic spike alert with timestamps in your local timezone (PDT or PST), but your access.log entries are in UTC. Here's how to quickly convert and

1. Create the Filter # Create a new filter file sudo nano /etc/fail2ban/filter.d/myfilter.conf Basic filter structure: [Definition] failregex = ^<HOST> .* "GET /bad-url.*" 4\d\d ^<

🧑‍💻TL; DR for quick forensics: sudo fail2ban-client status nginx-botsearch why-banned <ip_address_in_question> If you run fail2ban in front of a public-facing service, you'll eventually want to answer

Unbeknownst to me, I was inadvertently adding files to the docker overlay2 directory when I was debugging/troubleshooting a container using the docker build command. That and over a year of updates and

I was looking to see about loading some external links in a new window for some third-party links, and noticed it wasn't available via the link mechanisms. A quick search showed