title: Fail2ban no matches for nginx-botsearch
body: <p>I try to use the filter nginx-botsearch.conf in fail2ban.</p>
  
  <p>This is the entry to be checked:</p>
  
  <blockquote>
    <p>[error] 4904#4904: *2057 "/var/www/html/XXXX" is not found (2: No
    such file or directory), client: XX.XXX.XXX.XX, server: XXXXX.XX,
    request: "GET /_asterisk/ HTTP/1.1", host: "XX.XX.XXX.XX"</p>
  </blockquote>
  
  <p>With this failregex:</p>
  
  <pre><code>[INCLUDES]
  
  # Load regexes for filtering
  before = botsearch-common.conf
  
  [Definition]
  
  failregex = ^&lt;HOST&gt; \- \S+ \[\] \"(GET|POST|HEAD) \/&lt;block&gt; \S+\" 404 .+$
              ^ \[error\] \d+#\d+: \*\d+ (\S+ )?\"\S+\" (failed|is not found) \(2\: No such file or directory\), client\: &lt;HOST&gt;\, server\: \S*\, request: \"(GET|POST|HEAD) \/&lt;block&gt; \S+\"\, .*?$
  
  ignoreregex = 
  </code></pre>
  
  <p>But if i test it, it doesn't find any matches. I can't find the issue here.</p>
  
  <h1>Running tests</h1>
  
  <pre><code>sudo fail2ban-regex --print-all-missed /var/log/nginx/error.log /etc/fail2ban/filter.d/nginx-botsearch.conf
  </code></pre>
  
  <h1>Results</h1>
  
  <pre><code>Failregex: 0 total
  
  Ignoreregex: 0 total
  
  Date template hits:
  |- [# of hits] date format
  |  [2] Year(?P&lt;_sep&gt;[-/.])Month(?P=_sep)Day 24hour:Minute:Second(?:,Microseconds)?
  `-
  
  Lines: 2 lines, 0 ignored, 0 matched, 2 missed
  [processed in 0.00 sec]
  
  |- Missed line(s):
  |  2018/04/06 10:37:18 [error] 1193#1193: *2045 open() "/var/www/html/favicon.ico" failed (2: No such file or directory), client: XXXX, server: XXXX, request: "GET /favicon.ico HTTP/2.0", host: "XXXX"
  |  2018/04/06 10:37:18 [error] 1193#1193: *2045 open() "/var/www/html/favicon.ico" failed (2: No such file or directory), client: XXXX, server: XXXX, request: "GET /favicon.ico HTTP/2.0", host: "XXXX"
  </code></pre>