mirror of https://github.com/fail2ban/fail2ban
changed zoneminder regex as per Sebres and yarikoptic recommendations
parent
7013729a1f
commit
ac95449bbb
|
@ -3,7 +3,7 @@
|
|||
|
||||
[Definition]
|
||||
|
||||
# pattern: [client 10.1.1.1:38022] WAR [Login denied for user "test"], referer: https://zoneminderurl/
|
||||
# pattern: [Wed Apr 27 23:12:07.736196 2016] [:error] [pid 2460] [client 10.1.1.1:47296] WAR [Login denied for user "test"], referer: https://zoneminderurl/index.php
|
||||
#
|
||||
#
|
||||
# Option: failregex
|
||||
|
@ -13,7 +13,7 @@
|
|||
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
|
||||
|
||||
|
||||
failregex = ^.*? [[]client <HOST>:\d\d\d\d\d] WAR [[]Login denied for user \S*], referer: \S*$
|
||||
failregex = ^\[\](?: \[:error\])?(?: \[pid \d+\])? \[client <HOST>:\d+\] WAR \[Login denied for user "[^"]*"\]
|
||||
|
||||
ignoreregex =
|
||||
|
||||
|
|
Loading…
Reference in New Issue