# SPDX-License-Identifier: AGPL-3.0-only
# The public unblock page refusing a visitor — the rate limit or the
# captcha — in the controller's own log (slog text). The address is the
# visitor's (X-Forwarded-For, trusted from the proxy on the same machine).
#   time=2026-08-17T21:40:12.101Z level=WARN msg="public page refused" why=rate ip=203.0.113.9
parser: shieldlist-unblock-refused
log: shieldlist
prefilter: "public page refused"
regex: '^time=(?P<time>\S+) level=WARN msg="public page refused" why=(?P<why>\w+) ip=(?P<ip>[0-9a-fA-F.:]+)'
time_field: time
time_format: rfc3339
