OK, I should hav red an regedx tururial at first.

failregex= .*Login failed: '.*' \(Remote IP: '<HOST>\).*

did the job


Michael Keil <[email protected]> schrieb am Sa., 25. Juli 2015 um
20:58 Uhr:

> Hi,
>
> the following failregex gives me some trouble and to be honest I can't
> solve it by myself. The owncloud-auth jail is loaded, though never
> triggered. All others jails work flawlessly. The regex seems to be correct.
> I 'd really appreciate some help solving this issue.
>
> Thanks!
>
> Cheers
> Michael
>
> OS: Freebsd 10.1
> fail2bail py27-fail2ban-0.9.2
>
> [snip owncloud-auth.con]
> failregex= ^.* Login failed: '.*' \(Remote IP: '<HOST>\).*$
> [...]
>
> fail2ban-regex output
>
> Use   failregex filter file : owncloud-auth, basedir:
> /usr/local/etc/fail2ban
> Use         log file : /usr/jails/webjail/somesubdirs/owncloud.log
> Use         encoding : UTF-8
>
> fail2ban-regex Results
>
> Failregex: 0 total
> Ignoreregex: 0 total
>
> Date template hits:
> |- [# of hits] date format
> |  [6] (?:DAY )?MON Day 24hour:Minute:Second(?:\.Microseconds)?(?: Year)?
> `-
>
> Lines: 6 lines, 0 ignored, 0 matched, 6 missed [processed in 0.00 sec]
> |- Missed line(s):
> |
>  
> {"reqId":"Q+OgnwQ5M\/hTfFTQccJW","remoteAddr":"784.760.348.49","app":"core","message":"Login
> failed: 'abc' (Remote IP: 784.760.348.49)","level":2,"time":"Jul 25
> 18:11:27"}
>
>
>
------------------------------------------------------------------------------
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to