Hello Yassine, Am Mittwoch, dem 13.10.2021 um 15:30 +0100 schrieb Yassine Chaouche: > > Oct 13 13:17:53 auth-worker(48469): Info: sql(rai,20.89.58.29): > unknown user
have you tried this rule? Info: sql(.*,<HOST>): unknown user It matches fine in fail2ban-regex. Cheers, tim _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users