feat(collector): also filter nginx TLS handshake bot noise

b3aa7232d32f6648bb1db57ba3f97e5b417f57fe · 2026-05-11 20:50:40 -0700 · SteveStudio2

Files touched

M index.js

Diff

commit b3aa7232d32f6648bb1db57ba3f97e5b417f57fe
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date:   Mon May 11 20:50:40 2026 -0700

    feat(collector): also filter nginx TLS handshake bot noise
---
 index.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/index.js b/index.js
index 6330e82..d467daa 100644
--- a/index.js
+++ b/index.js
@@ -60,6 +60,9 @@ const BENIGN_NOISE_PATTERNS = {
   // vendor-side issues, not actionable code bugs.
   'abrams-report-scrape': /^\[(html|rss)\] [a-z0-9-]+ failed: (HTTP 4\d\d|Request timed out|network timeout)/,
   'abrams-report-wallpaper': /^\[(html|rss)\] [a-z0-9-]+ failed: (HTTP 4\d\d|Request timed out|network timeout)/,
+  // nginx error.log gets constant noise from bots probing TLS — bad key share,
+  // unsupported protocol, etc. Not actionable on our side.
+  'error': /SSL_do_handshake\(\) failed.*(bad key share|unsupported protocol|wrong version number|no shared cipher|tlsv1 alert|peer closed connection)/i,
 };
 
 function isBenignNoise(processName, chunk) {

← e295195 feat(collector): per-process benign-noise filter for known t · back to Cncp Failure Collector · fix(collector): skip phantom pm2 restarts 411ed67 →