mirror of https://github.com/fail2ban/fail2ban
review (anchoring RE, etc)
parent
db8c943a7b
commit
9a558589d7
|
@ -12,7 +12,9 @@
|
|||
|
||||
[Definition]
|
||||
|
||||
failregex = pvedaemon\[\d*\]: authentication failure; rhost=<HOST> user=.* msg=.*
|
||||
_daemon = pvedaemon
|
||||
|
||||
failregex = ^\s*\S+ %(_daemon)s\[\d+\]: authentication failure; rhost=<ADDR> user=<F-USER>\S+</F-USER>
|
||||
|
||||
ignoreregex =
|
||||
|
||||
|
|
|
@ -1,6 +1,5 @@
|
|||
#1
|
||||
# failJSON: { "time": "2005-03-08T09:37:44", "match": true , "host": "212.106.229.105" }
|
||||
Mar 8 09:37:44 HOSTNAME pvedaemon[12021]: authentication failure; rhost=212.106.229.105 user=root@pam msg=Authentication failure
|
||||
#2
|
||||
# failJSON: { "time": "2005-03-09T03:32:27", "match": true , "host": "212.106.229.105" }
|
||||
Mar 9 03:32:27 HOSTNAME pvedaemon[8961]: authentication failure; rhost=212.106.229.105 user=jose@pve msg=invalid credentials
|
||||
# failJSON: { "time": "2005-03-08T09:37:44", "match": true , "host": "192.0.2.123" }
|
||||
Mar 8 09:37:44 HOSTNAME pvedaemon[12021]: authentication failure; rhost=192.0.2.123 user=root@pam msg=Authentication failure
|
||||
|
||||
# failJSON: { "time": "2005-03-09T03:32:27", "match": true , "host": "192.0.2.124" }
|
||||
Mar 9 03:32:27 HOSTNAME pvedaemon[8961]: authentication failure; rhost=192.0.2.124 user=jose@pve msg=invalid credentials
|
||||
|
|
Loading…
Reference in New Issue