From e841209f1b0bfce6233847931433f4bf17bf3a70 Mon Sep 17 00:00:00 2001
From: Cyril Jaquier <cyril.jaquier@fail2ban.org>
Date: Tue, 17 Jul 2007 20:41:00 +0000
Subject: [PATCH] - Added new regex for proftpd. Thanks to Vaclav Misek

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@603 a942ae1a-1317-0410-a47c-b1dcaea8d605
---
 README                       | 2 +-
 config/filter.d/proftpd.conf | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/README b/README
index 73a0cd25..8df3d779 100644
--- a/README
+++ b/README
@@ -75,7 +75,7 @@ Nick Munger, Christoph Haas, Justin Shore, Joël Bertrand,
 René Berber, mEDI, Axel Thimm, Eric Gerbier, Christian Rauch,
 Michael C. Haller, Jonathan Underwood, Hanno 'Rince' Wagner,
 Daniel B. Cid, David Nutter, Raphaël Marichez, Guillaume
-Delvit
+Delvit, Vaclav Misek
 
 License:
 --------
diff --git a/config/filter.d/proftpd.conf b/config/filter.d/proftpd.conf
index 1fc31ef5..45b91c66 100644
--- a/config/filter.d/proftpd.conf
+++ b/config/filter.d/proftpd.conf
@@ -15,6 +15,7 @@
 # Values: TEXT
 #
 failregex = USER \S+: no such user found from \S* ?\[<HOST>\] to \S+\s*$
+            \(\S*\[<HOST>\]\) - USER \S+ \(Login failed\): Incorrect password.$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.