diff --git a/data/fail2ban/OS/Ubuntu/18.04/filter.d/nginx-raw.conf b/data/fail2ban/OS/Ubuntu/18.04/filter.d/nginx-raw.conf
new file mode 100644
index 0000000..1429eea
--- /dev/null
+++ b/data/fail2ban/OS/Ubuntu/18.04/filter.d/nginx-raw.conf
@@ -0,0 +1,5 @@
+[Definition]
+
+failregex = ^.*client: <HOST>.* 400.*$
+
+ignoreregex =