mirror of https://github.com/fail2ban/fail2ban
improve regex (anchored from left, no catch-alls, `<ADDR>` for IP, etc)
parent
cf9135983c
commit
6104444bb4
|
@ -4,5 +4,5 @@
|
||||||
|
|
||||||
[Definition]
|
[Definition]
|
||||||
|
|
||||||
failregex = \[vaultwarden::api::(identity||admin||core::two_factor::authenticator)\]\[ERROR\] (Invalid admin token||Invalid TOTP code||Username or password is incorrect)(.*) IP: <HOST>(?:\. Username: <F-USER>.+</F-USER>\.)?$
|
failregex = ^\s*(?:\[\]\s*)?\[vaultwarden::api::(identity||admin||core::two_factor::authenticator)\]\[ERROR\] (Invalid admin token||Invalid TOTP code||Username or password is incorrect)[\.!](?:\s+(?!IP:)\S+)* IP: <ADDR>(?:\. Username: <F-USER>\S+</F-USER>)?
|
||||||
ignoreregex =
|
ignoreregex =
|
||||||
|
|
Loading…
Reference in New Issue