On Wed, 12 Sep 2007, Dan Denton wrote:

> After some research and messing around, I'm reasonable sure the problem is
> with the regex.

Based on the log snippet you included in your mail, I think the regex you 
want is:

.* vsftpd.* authentication failure.* rhost=(?P<host>\S+)

Rene's regex is also looking for the ' user=' information, which you don't 
appear to be logging.

-- D


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Denyhosts-user mailing list
Denyhosts-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to