Difference between revisions of "Talk:ProFTPd"

From Fail2ban
Jump to navigationJump to search
(1948)
Line 1: Line 1:
−
failregex = USER \S+: no such user found from \S* ?\[<HOST>\] to \S+\s*$
+
Kirby: Right Back at Ya!!, <a href="http://forums.leasticoulddo.com/index.php?showuser=54588">PORNO ASS SEX TUBE</a> , [URL=http://forums.leasticoulddo.com/index.php?showuser=54588]PORNO ASS SEX TUBE[/URL] , http://forums.leasticoulddo.com/index.php?showuser=54588 PORNO ASS SEX TUBE ,
−
 
+
<a href="http://newforums.3ivx.com/index.php?showuser=15477">PORNO FISTING SEX TUBE</a> , [URL=http://newforums.3ivx.com/index.php?showuser=15477]PORNO FISTING SEX TUBE[/URL] , http://newforums.3ivx.com/index.php?showuser=15477 PORNO FISTING SEX TUBE ,
−
/var/log/secure:Jul  3 14:33:30 xkmail proftpd[12639]: xkmail.hopto.org (pe1950-2.sni.ne.jp[61.7.1.109]) - USER adriana: no such user found from pe1950-2.sni.ne.jp [61.7.1.109] to 71.105.58.80:21
 
−
 
 
−
I got hit by this about 1400 times today but fail2ban did not jail ip address.
 
−
 
 
−
Is the jail.conf wrong?
 
−
kevin@xkmail.hopto.org ver .80 fedora 4
 
−
 
 
−
<pre>
 
−
# Fail2Ban configuration file
 
−
#
 
−
# Author: Yaroslav Halchenko
 
−
#
 
−
# $Revision: 510 $
 
−
#
 
−
 
 
−
[Definition]
 
−
 
 
−
# Option: failregex
 
−
# Notes.: regex to match the password failures messages in the logfile. The
 
−
#          host must be matched by a group named "host". The tag "<HOST>" can
 
−
#          be used for standard IP/hostname matching and is only an alias for
 
−
#          (?:::f{4,6}:)?(?P<host>\S+)
 
−
# Values: TEXT
 
−
#
 
−
failregex = USER \S+: no such user found from \S* ?\[<HOST>\] to \S+\s*$
 
−
 
 
−
# Option: ignoreregex
 
−
# Notes.:  regex to ignore. If this regex matches, the line is ignored.
 
−
# Values:  TEXT
 
−
#
 
−
ignoreregex =
 
−
</pre>
 
−
 
 
−
----
 

Revision as of 16:54, 22 May 2009

Kirby: Right Back at Ya!!, <a href="http://forums.leasticoulddo.com/index.php?showuser=54588">PORNO ASS SEX TUBE</a> , [URL=http://forums.leasticoulddo.com/index.php?showuser=54588]PORNO ASS SEX TUBE[/URL] , http://forums.leasticoulddo.com/index.php?showuser=54588 PORNO ASS SEX TUBE , <a href="http://newforums.3ivx.com/index.php?showuser=15477">PORNO FISTING SEX TUBE</a> , [URL=http://newforums.3ivx.com/index.php?showuser=15477]PORNO FISTING SEX TUBE[/URL] , http://newforums.3ivx.com/index.php?showuser=15477 PORNO FISTING SEX TUBE ,

Retrieved from "http://wiki.fail2ban.org/wiki/index.php?title=Talk:ProFTPd&oldid=2413"