Hello Yassine,

Am Mittwoch, dem 13.10.2021 um 15:30 +0100 schrieb Yassine Chaouche:
> 
> Oct 13 13:17:53 auth-worker(48469): Info: sql(rai,20.89.58.29):
> unknown user

have you tried this rule?

        Info: sql(.*,<HOST>): unknown user

It matches fine in fail2ban-regex.
Cheers,

    tim



_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to