fail2ban/config/filter.d/monit.conf

# Fail2Ban filter for monit.conf, looks for failed access attempts
#
#

[Definition]

failregex = \]\s*error\s*:\s*Warning:\s+Client '<HOST>' supplied unknown user '\w+' accessing monit httpd$
            \]\s*error\s*:\s*Warning:\s+Client '<HOST>' supplied wrong password for user '\w+' accessing monit httpd$
Block brute-force attempts against the Monit gui 2014-04-17 04:21:41 +00:00			`# Fail2Ban filter for monit.conf, looks for failed access attempts`
			`#`
			`#`

			`[Definition]`

Tidy up filter.d/monit.conf, make regex more complete. Add ChangeLog / THANKS entry. Add test cases. 2014-04-19 19:58:03 +00:00			`failregex = \]\serror\s:\s*Warning:\s+Client '<HOST>' supplied unknown user '\w+' accessing monit httpd$`
			`\]\serror\s:\s*Warning:\s+Client '<HOST>' supplied wrong password for user '\w+' accessing monit httpd$`
Block brute-force attempts against the Monit gui 2014-04-17 04:21:41 +00:00