github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Adjusting previous PR (MySQL logs) according to my comments

pull/167/merge
Yaroslav Halchenko 2013-04-09 17:59:45 -04:00
parent 3e6be243bf
commit ffaa9697ee
2 changed files with 4 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
config/filter.d/mysqld.conf
View File

@ -1,8 +1,7 @@
# Fail2Ban configuration file
# Fail2Ban configuration file for unsuccesfull MySQL authentication attempts
#
# Author: Artur Penttinen
#
# $Revision$
# Authors: Artur Penttinen
# Yaroslav O. Halchenko
#
[INCLUDES]
@ -23,7 +22,7 @@ before = common.conf
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
# 130322 11:26:54 [Warning] Access denied for user 'root'@'127.0.0.1' (using password: YES)
failregex = Access denied for user '\w+'@'<HOST>'
failregex = Access denied for user '\w+'@'<HOST>' (to database '[^']*'|\(using password: (YES|NO)\))*\s*$
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.

11
testcases/files/logs/mysqld.log
View File

@ -1,17 +1,6 @@
130323 21:14:28 [Warning] Access denied for user 'root'@'192.168.1.34' (using password: NO)
130324 0:04:00 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: NO)
130324 0:04:02 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:05 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:07 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:09 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:11 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:13 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:16 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 0:04:18 [Warning] Access denied for user 'root'@'192.168.1.35' (using password: YES)
130324 8:24:09 [Warning] Access denied for user 'root'@'220.95.238.171' (using password: NO)
130324 17:56:13 [Warning] Access denied for user 'root'@'61.160.223.112' (using password: NO)
130324 17:56:14 [Warning] Access denied for user 'root'@'61.160.223.112' (using password: YES)
130324 17:56:15 [Warning] Access denied for user 'root'@'61.160.223.112' (using password: YES)
130324 19:01:39 [Warning] Access denied for user 'root'@'61.147.108.35' (using password: NO)
130324 19:01:40 [Warning] Access denied for user 'root'@'61.147.108.35' (using password: YES)
130324 19:01:41 [Warning] Access denied for user 'root'@'61.147.108.35' (using password: YES)